﻿<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<Events><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T05:07:31.1950522Z'/><EventRecordID>50911</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='5976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>Background Intelligent Transfer Service</Data><Data Name='param2'>自动启动</Data><Data Name='param3'>按需启动</Data><Data Name='param4'>BITS</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Background Intelligent Transfer Service 服务的启动类型从 自动启动 更改为 按需启动。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:52:41.0709080Z'/><EventRecordID>50910</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='16952'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>Background Intelligent Transfer Service</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>自动启动</Data><Data Name='param4'>BITS</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Background Intelligent Transfer Service 服务的启动类型从 按需启动 更改为 自动启动。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:50:27.0104254Z'/><EventRecordID>50909</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='2128'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>FinalWire AIDA64 Kernel Driver</Data><Data Name='ImagePath'>D:\图吧工具箱202608\tools\综合检测\aida64\kerneld-x64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: FinalWire AIDA64 Kernel Driver&#13;&#10;服务文件名: D:\图吧工具箱202608\tools\综合检测\aida64\kerneld-x64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:50:19.8385286Z'/><EventRecordID>50908</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='12972'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>ALSysIO</Data><Data Name='ImagePath'>C:\Users\UaHeYu\AppData\Local\Temp\\ALSysIO64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: ALSysIO&#13;&#10;服务文件名: C:\Users\UaHeYu\AppData\Local\Temp\\ALSysIO64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:44:42.3143468Z'/><EventRecordID>50907</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='22056'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>Background Intelligent Transfer Service</Data><Data Name='param2'>自动启动</Data><Data Name='param3'>按需启动</Data><Data Name='param4'>BITS</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Background Intelligent Transfer Service 服务的启动类型从 自动启动 更改为 按需启动。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:42:37.0609817Z'/><EventRecordID>50906</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='22056'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>Background Intelligent Transfer Service</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>自动启动</Data><Data Name='param4'>BITS</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Background Intelligent Transfer Service 服务的启动类型从 按需启动 更改为 自动启动。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:38:14.1307691Z'/><EventRecordID>50905</EventRecordID><Correlation ActivityID='{571c6d31-3018-0007-c747-4b571830dd01}'/><Execution ProcessID='1848' ThreadID='13232'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data><Data Name='param5'>{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data><Data Name='param6'>Asuka</Data><Data Name='param7'>UaHeYu</Data><Data Name='param8'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 Asuka\UaHeYu SID (S-1-5-21-2092180878-166494762-4224106802-1002)授予针对 CLSID 为 &#13;&#10;{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}&#13;&#10;、APPID 为 &#13;&#10;{15C20B67-12E7-4BB6-92BB-7AFF07997402}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:38.9182907Z'/><EventRecordID>50904</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='22056'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>NTIOLib_MysticLight</Data><Data Name='ImagePath'>C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Lib\\NTIOLib_X64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: NTIOLib_MysticLight&#13;&#10;服务文件名: C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Lib\\NTIOLib_X64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:38.7133426Z'/><EventRecordID>50903</EventRecordID><Correlation/><Execution ProcessID='19264' ThreadID='12376'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="MSI Center - Terminal Server" dir=in protocol=tcp localport=26822 action=allow</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:38.6521251Z'/><EventRecordID>50902</EventRecordID><Correlation/><Execution ProcessID='1464' ThreadID='1840'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - Terminal Server"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:38.4846104Z'/><EventRecordID>50901</EventRecordID><Correlation/><Execution ProcessID='3456' ThreadID='20160'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - Terminal Server"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:36.4896011Z'/><EventRecordID>50900</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='19788'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV29</Data><Data Name='param2'>%%3</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600320039000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV29 服务启动失败: &#13;&#10;系统找不到指定的路径。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:36.4890795Z'/><EventRecordID>50899</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='19788'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMDRyzenMasterDriverV29</Data><Data Name='ImagePath'>C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>自动启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMDRyzenMasterDriverV29&#13;&#10;服务文件名: C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 自动启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:36.4880478Z'/><EventRecordID>50898</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='19788'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV29</Data><Data Name='param2'>%%3</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600320039000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV29 服务启动失败: &#13;&#10;系统找不到指定的路径。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:36.4626900Z'/><EventRecordID>50897</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='19788'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>NTIOLib_CC_COMM</Data><Data Name='ImagePath'>C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: NTIOLib_CC_COMM&#13;&#10;服务文件名: C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:36.0841456Z'/><EventRecordID>50896</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='13496'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>NTIOLib_CC_COMM</Data><Data Name='ImagePath'>C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: NTIOLib_CC_COMM&#13;&#10;服务文件名: C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='BTHUSB'/><EventID Qualifiers='16389'>18</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:33.1270701Z'/><EventRecordID>50895</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9984'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Binary>00000800010000000000000012000540000000000000000000000000000000000000000000000000E000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>Windows 无法在本地适配器上存储蓝牙身份验证代码(链接密钥)。启动时，蓝牙键盘可能无法在系统 BIOS 中工作。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:32.9109057Z'/><EventRecordID>50894</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='21048'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{00000000-0000-0000-0000-000000000000}</Data><Data Name='param5'>{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>LOCAL SERVICE</Data><Data Name='param8'>S-1-5-19</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19)授予针对 CLSID 为 &#13;&#10;{00000000-0000-0000-0000-000000000000}&#13;&#10;、APPID 为 &#13;&#10;{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:32.9089022Z'/><EventRecordID>50893</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='4060'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{00000000-0000-0000-0000-000000000000}</Data><Data Name='param5'>{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>LOCAL SERVICE</Data><Data Name='param8'>S-1-5-19</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19)授予针对 CLSID 为 &#13;&#10;{00000000-0000-0000-0000-000000000000}&#13;&#10;、APPID 为 &#13;&#10;{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Volsnap' Guid='{cb017cd2-1f37-4e65-82bc-3e91f6a37559}' EventSourceName='volsnap'/><EventID Qualifiers='16390'>33</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:31.9550248Z'/><EventRecordID>50892</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9984'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='DeviceName'>\Device\HarddiskVolumeShadowCopy3</Data><Data Name='VolumeName'>C:</Data><Data Name='NTSTATUS'>00000000</Data><Data Name='SourceTag'>178</Data><Data Name='SourceFileID'>0x0001</Data><Data Name='SourceLine'>6409</Data><Binary>00000000060030000000000021000640B20000000000000002000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>卷 C: 旧的卷影副本被删除以便把卷 C: 的卷影副本磁盘使用空间保持在用户设置的限制以下。</Message><Level>信息</Level><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Power-Troubleshooter' Guid='{cdc05e28-c449-49c6-b9d2-88cf761644df}'/><EventID>1</EventID><Version>3</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:31.7998791Z'/><EventRecordID>50891</EventRecordID><Correlation ActivityID='{433441d6-185a-44b8-babb-122ca255822b}'/><Execution ProcessID='5328' ThreadID='5820'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='SleepTime'>2026-08-19T20:33:23.2609517Z</Data><Data Name='WakeTime'>2026-08-20T04:37:30.7125706Z</Data><Data Name='SleepDuration'>1820</Data><Data Name='WakeDuration'>1212</Data><Data Name='DriverInitDuration'>1193</Data><Data Name='BiosInitDuration'>43165</Data><Data Name='HiberWriteDuration'>1158</Data><Data Name='HiberReadDuration'>1054</Data><Data Name='HiberPagesWritten'>401671</Data><Data Name='Attributes'>1979728129</Data><Data Name='TargetState'>6</Data><Data Name='EffectiveState'>5</Data><Data Name='WakeSourceType'>0</Data><Data Name='WakeSourceTextLength'>0</Data><Data Name='WakeSourceText'></Data><Data Name='WakeTimerOwnerLength'>0</Data><Data Name='WakeTimerContextLength'>0</Data><Data Name='NoMultiStageResumeReason'>0</Data><Data Name='WakeTimerOwner'></Data><Data Name='WakeTimerContext'></Data><Data Name='CheckpointDuration'>46</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统已从低功耗状态中恢复。&#13;&#10;&#13;&#10;睡眠时间:  ‎2026‎-‎08‎-‎19T20:33:23.260951700Z&#13;&#10;唤醒时间: ‎2026‎-‎08‎-‎20T04:37:30.712570600Z&#13;&#10;&#13;&#10;唤醒源: Unknown</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Power-Troubleshooter</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Winlogon' Guid='{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}'/><EventID>7001</EventID><Version>0</Version><Level>4</Level><Task>1101</Task><Opcode>0</Opcode><Keywords>0x2000200000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:31.3398862Z'/><EventRecordID>50890</EventRecordID><Correlation/><Execution ProcessID='12820' ThreadID='3452'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TSId'>2</Data><Data Name='UserSid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data></EventData><RenderingInfo Culture='zh-CN'><Message>客户体验改善计划的用户登录通知</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Winlogon</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>566</EventID><Version>0</Version><Level>4</Level><Task>268</Task><Opcode>0</Opcode><Keywords>0x8000000000000604</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.9177872Z'/><EventRecordID>50889</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9964'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='BootId'>230</Data><Data Name='Reason'>1</Data><Data Name='PreviousSessionId'>2</Data><Data Name='PreviousSessionType'>1</Data><Data Name='PreviousSessionDurationInUs'>222523</Data><Data Name='PreviousEnergyCapacityAtStart'>0</Data><Data Name='PreviousFullEnergyCapacityAtStart'>0</Data><Data Name='PreviousEnergyCapacityAtEnd'>0</Data><Data Name='PreviousFullEnergyCapacityAtEnd'>0</Data><Data Name='NextSessionId'>4</Data><Data Name='NextSessionType'>0</Data><Data Name='PowerStateAc'>true</Data><Data Name='MonitorReason'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统会话已从2转换为 4.&#13;&#10;&#13;&#10;原因 Unknown &#13;&#10;&#13;&#10;BootId： 230</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>566</EventID><Version>0</Version><Level>4</Level><Task>268</Task><Opcode>0</Opcode><Keywords>0x8000000000000604</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6951513Z'/><EventRecordID>50888</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='6616'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='BootId'>230</Data><Data Name='Reason'>20</Data><Data Name='PreviousSessionId'>1</Data><Data Name='PreviousSessionType'>3</Data><Data Name='PreviousSessionDurationInUs'>29047432402</Data><Data Name='PreviousEnergyCapacityAtStart'>0</Data><Data Name='PreviousFullEnergyCapacityAtStart'>0</Data><Data Name='PreviousEnergyCapacityAtEnd'>0</Data><Data Name='PreviousFullEnergyCapacityAtEnd'>0</Data><Data Name='NextSessionId'>2</Data><Data Name='NextSessionType'>1</Data><Data Name='PowerStateAc'>true</Data><Data Name='MonitorReason'>20</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统会话已从1转换为 2.&#13;&#10;&#13;&#10;原因 SxTransition &#13;&#10;&#13;&#10;BootId： 230</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>27</EventID><Version>1</Version><Level>4</Level><Task>33</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6944986Z'/><EventRecordID>50887</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='BootType'>1</Data><Data Name='LoadOptions'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>引导类型为 0x1。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>25</EventID><Version>0</Version><Level>4</Level><Task>32</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6944984Z'/><EventRecordID>50886</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='BootMenuPolicy'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>引导菜单策略为 0x1。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>32</EventID><Version>0</Version><Level>4</Level><Task>58</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6944756Z'/><EventRecordID>50885</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='BitlockerUserInputTime'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>bootmgr 花费了 0 毫秒等待用户输入。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>18</EventID><Version>0</Version><Level>4</Level><Task>57</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6944358Z'/><EventRecordID>50884</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='EntryCount'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>此系统有 0x1 个引导选项。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>30</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.6943615Z'/><EventRecordID>50883</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='ResetEndStart'>0</Data><Data Name='LoadOSImageStart'>43152</Data><Data Name='StartOSImageStart'>43165</Data><Data Name='ExitBootServicesEntry'>44532</Data><Data Name='ExitBootServicesExit'>44532</Data></EventData><RenderingInfo Culture='zh-CN'><Message>固件报告了启动指标。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1038</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.4695141Z'/><EventRecordID>50882</EventRecordID><Correlation/><Execution ProcessID='17492' ThreadID='15856'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Path'>C:\Windows\Logs\MeasuredBoot\0000000230-0000000001.json</Data></EventData><RenderingInfo Culture='zh-CN'><Message>预证明运行状况检查确认设备应通过证明。&#13;&#10; 有关所做检查的详细信息，请参阅 C:\Windows\Logs\MeasuredBoot\0000000230-0000000001.json。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1041</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.4694145Z'/><EventRecordID>50881</EventRecordID><Correlation/><Execution ProcessID='17492' ThreadID='15856'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Json'>{"Version":2,"HealthStatus":"Attestable","Required":[{"Field":"TpmPresent","Value":true,"DesiredValue":true},{"Field":"TpmMeetsMinimumVersion","Value":true,"DesiredValue":true},{"Field":"TpmIsResponsive","Value":true,"DesiredValue":true},{"Field":"EkCertIsAvailable","Value":true,"DesiredValue":true},{"Field":"TcgLogFound","Value":true,"DesiredValue":true}],"Expected":[{"Field":"PcrsMatchTcgLog","Value":true,"DesiredValue":true}],"Informational":[{"Field":"SecureBootEnabled","ValueFromComputer":true,"ValueFromTcgLog":true,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"VirtualSecureMemory","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"SecureCorePCCompliant","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"MostRecentBootTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"CurrentTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"EkCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP384IsAvailable","Value":false,"DesiredValue":true},{"Field":"WindowsAikCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP384IsAvailable","Value":false,"DesiredValue":true}]}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>预证明运行状况检查详细信息: {"Version":2,"HealthStatus":"Attestable","Required":[{"Field":"TpmPresent","Value":true,"DesiredValue":true},{"Field":"TpmMeetsMinimumVersion","Value":true,"DesiredValue":true},{"Field":"TpmIsResponsive","Value":true,"DesiredValue":true},{"Field":"EkCertIsAvailable","Value":true,"DesiredValue":true},{"Field":"TcgLogFound","Value":true,"DesiredValue":true}],"Expected":[{"Field":"PcrsMatchTcgLog","Value":true,"DesiredValue":true}],"Informational":[{"Field":"SecureBootEnabled","ValueFromComputer":true,"ValueFromTcgLog":true,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"VirtualSecureMemory","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"SecureCorePCCompliant","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"MostRecentBootTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"CurrentTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"EkCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP384IsAvailable","Value":false,"DesiredValue":true},{"Field":"WindowsAikCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP384IsAvailable","Value":false,"DesiredValue":true}]}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7034</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.3942607Z'/><EventRecordID>50880</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='19412'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AndrowsSvr</Data><Data Name='param2'>1</Data><Binary>41006E00640072006F00770073005300760072000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>服务 AndrowsSvr 意外停止。这发生了 1 次。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>1</EventID><Version>4</Version><Level>4</Level><Task>5</Task><Opcode>0</Opcode><Keywords>0x8000000000000010</Keywords><TimeCreated SystemTime='2026-08-20T04:37:29.5001378Z'/><EventRecordID>50879</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='NewTime'>2026-08-20T04:37:29.5000000Z</Data><Data Name='OldTime'>2026-08-19T20:33:26.0913229Z</Data><Data Name='TimeDeltaInMs'>29043408</Data><Data Name='Reason'>2</Data><Data Name='ProcessName'></Data><Data Name='ProcessID'>4</Data><Data Name='CmosTime'>2026-08-20T12:37:29.5000000Z</Data><Data Name='TimeZoneBias'>-480</Data><Data Name='RealTimeIsUniversal'>false</Data><Data Name='SystemInCmosMode'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统时间已从 ‎2026‎-‎08‎-‎19T20:33:26.091322900Z.&#13;&#10;时间增量更改为 ‎2026‎-‎08‎-‎20T04:37:29.500000000Z： 29043408 ms&#13;&#10;&#13;&#10;更改原因： System time synchronized with the hardware clock.&#13;&#10;进程： '' (PID 4).&#13;&#10;&#13;&#10;RTC 时间： ‎2026‎-‎08‎-‎20T12:37:29.500000000Z&#13;&#10;当前时区偏差 -480&#13;&#10;RTC 时间以 UTC： false&#13;&#10;系统时间基于 RTC 时间： false</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider><Keywords><Keyword>Time</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>107</EventID><Version>1</Version><Level>4</Level><Task>102</Task><Opcode>0</Opcode><Keywords>0x8000000000000444</Keywords><TimeCreated SystemTime='2026-08-19T20:33:26.0916355Z'/><EventRecordID>50878</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='TargetState'>6</Data><Data Name='EffectiveState'>5</Data><Data Name='WakeFromState'>5</Data><Data Name='ProgrammedWakeTimeAc'>1601-01-01T00:00:00.0000000Z</Data><Data Name='ProgrammedWakeTimeDc'>1601-01-01T00:00:00.0000000Z</Data><Data Name='WakeRequesterTypeAc'>0</Data><Data Name='WakeRequesterTypeDc'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统已从睡眠状态恢复。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='EventLog'/><EventID Qualifiers='32768'>6013</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-20T04:37:30.1458656Z'/><EventRecordID>50877</EventRecordID><Correlation/><Execution ProcessID='3944' ThreadID='3116'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Data></Data><Data></Data><Data></Data><Data>29751</Data><Data>60</Data><Data>-480 中国标准时间</Data><Binary>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</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>系统启动时间为 29751 秒。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>42</EventID><Version>3</Version><Level>4</Level><Task>64</Task><Opcode>0</Opcode><Keywords>0x8000000000000404</Keywords><TimeCreated SystemTime='2026-08-19T20:33:24.0877095Z'/><EventRecordID>50876</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9936'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='TargetState'>6</Data><Data Name='EffectiveState'>5</Data><Data Name='Reason'>4</Data><Data Name='Flags'>0</Data><Data Name='TransitionsToOn'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统正在进入睡眠状态。&#13;&#10;&#13;&#10;睡眠原因: Application API</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>16</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:33:23.8749436Z'/><EventRecordID>50875</EventRecordID><Correlation/><Execution ProcessID='6696' ThreadID='5220'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='HiveNameLength'>85</Data><Data Name='HiveName'>\??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat</Data><Data Name='KeysUpdated'>0</Data><Data Name='DirtyPages'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已经清除配置单元 \??\C:\ProgramData\Microsoft\Provisioning\Microsoft-Desktop-Provisioning-Sequence.dat 中的访问历史记录，更新 0 个项并创建 0 个已修改的页面。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>566</EventID><Version>0</Version><Level>4</Level><Task>268</Task><Opcode>0</Opcode><Keywords>0x8000000000000604</Keywords><TimeCreated SystemTime='2026-08-19T20:33:23.2627398Z'/><EventRecordID>50874</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='6624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='BootId'>230</Data><Data Name='Reason'>17</Data><Data Name='PreviousSessionId'>0</Data><Data Name='PreviousSessionType'>0</Data><Data Name='PreviousSessionDurationInUs'>704762804</Data><Data Name='PreviousEnergyCapacityAtStart'>0</Data><Data Name='PreviousFullEnergyCapacityAtStart'>0</Data><Data Name='PreviousEnergyCapacityAtEnd'>0</Data><Data Name='PreviousFullEnergyCapacityAtEnd'>0</Data><Data Name='NextSessionId'>1</Data><Data Name='NextSessionType'>3</Data><Data Name='PowerStateAc'>true</Data><Data Name='MonitorReason'>17</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统会话已从0转换为 1.&#13;&#10;&#13;&#10;原因 ScreenOffGracePeriod &#13;&#10;&#13;&#10;BootId： 230</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>187</EventID><Version>0</Version><Level>4</Level><Task>243</Task><Opcode>0</Opcode><Keywords>0x8000400000000404</Keywords><TimeCreated SystemTime='2026-08-19T20:33:23.2624637Z'/><EventRecordID>50873</EventRecordID><Correlation/><Execution ProcessID='12820' ThreadID='3452'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ApiCallerNameLength'>53</Data><Data Name='ApiCallerName'>\Device\HarddiskVolume3\Windows\System32\winlogon.exe</Data><Data Name='SystemAction'>3</Data><Data Name='LightestSystemState'>2</Data></EventData><RenderingInfo Culture='zh-CN'><Message>用户模式进程尝试通过调用 SetSuspendState 或 SetSystemPowerState API 更改系统状态。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Winlogon' Guid='{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}'/><EventID>7002</EventID><Version>0</Version><Level>4</Level><Task>1102</Task><Opcode>0</Opcode><Keywords>0x2000200000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:33:22.9884879Z'/><EventRecordID>50872</EventRecordID><Correlation/><Execution ProcessID='1460' ThreadID='1944'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TSId'>1</Data><Data Name='UserSid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data></EventData><RenderingInfo Culture='zh-CN'><Message>客户体验改善计划的用户注销通知</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Winlogon</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='User32' Guid='{b0aa8734-56f7-41cc-b2f4-de228e98b946}' EventSourceName='User32'/><EventID Qualifiers='32768'>1074</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:33:16.7331610Z'/><EventRecordID>50871</EventRecordID><Correlation/><Execution ProcessID='1308' ThreadID='5468'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (ASUKA)</Data><Data Name='param2'>ASUKA</Data><Data Name='param3'>其他(计划外)</Data><Data Name='param4'>0x0</Data><Data Name='param5'>关闭电源</Data><Data Name='param6'></Data><Data Name='param7'>Asuka\UaHeYu</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (ASUKA) 由于以下原因已代表用户 Asuka\UaHeYu 启动计算机 ASUKA 的 关闭电源: 其他(计划外)&#13;&#10; 原因代码: 0x0&#13;&#10; 关机类型: 关闭电源&#13;&#10; 注释: </Message><Level>信息</Level><Provider>User32</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:32:49.9134159Z'/><EventRecordID>50870</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:32:26.8296681Z'/><EventRecordID>50869</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:32:23.1492758Z'/><EventRecordID>50868</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:32:21.6909203Z'/><EventRecordID>50867</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:32:20.5017854Z'/><EventRecordID>50866</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:29:16.0301379Z'/><EventRecordID>50865</EventRecordID><Correlation ActivityID='{571c6d31-3018-0009-bf36-2d571830dd01}'/><Execution ProcessID='1848' ThreadID='11096'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data><Data Name='param5'>{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data><Data Name='param6'>Asuka</Data><Data Name='param7'>UaHeYu</Data><Data Name='param8'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 Asuka\UaHeYu SID (S-1-5-21-2092180878-166494762-4224106802-1002)授予针对 CLSID 为 &#13;&#10;{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}&#13;&#10;、APPID 为 &#13;&#10;{15C20B67-12E7-4BB6-92BB-7AFF07997402}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>232</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.2575436Z'/><EventRecordID>50864</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully connected to port C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444) on switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444(Friendly Name: Default Switch).</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.2565999Z'/><EventRecordID>50863</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>23</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "启用轻型 NIC" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>7</EventID><Version>0</Version><Level>4</Level><Task>1004</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.2554673Z'/><EventRecordID>50862</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Miniport NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully initialized.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.2553490Z'/><EventRecordID>50861</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>1</Data><Data Name='OldNicIPv6RscEnabled'>1</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>4</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已启用，当前 IPv4: 已禁用，以前的 IPv6: 已启用，当前 IPv6: 已禁用。原因: NIC 启动</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.2469675Z'/><EventRecordID>50860</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>24</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "禁用轻型 NIC" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>234</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:28:14.0384203Z'/><EventRecordID>50859</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='11276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortNameLen'>1</Data><Data Name='PortName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 successfully disconnected from port .</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1808</EventID><Version>2</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:26:53.9708649Z'/><EventRecordID>50858</EventRecordID><Correlation/><Execution ProcessID='9704' ThreadID='6360'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DeviceAttributes'>BaseBoardManufacturer:Micro-Star International Co., Ltd.;FirmwareManufacturer:American Megatrends International, LLC.;FirmwareVersion:1.A32;OEMModelBaseBoard:MPG B850M EDGE TI MAX WIFI (MS-7E92);OEMManufacturerName:Micro-Star International Co., Ltd.;OSArchitecture:amd64;</Data><Data Name='BucketId'>1853eab2fb32689d0ed0c2632d04df7cdc60eccb230b5e5e127bd5ce6e23d418</Data><Data Name='BucketConfidenceLevel'>High Confidence</Data><Data Name='UpdateType'>Windows UEFI CA 2023 (DB), Option ROM CA 2023 (DB), 3P UEFI CA 2023 (DB), KEK 2023, Boot Manager (2023)</Data></EventData><RenderingInfo Culture='zh-CN'><Message>此设备已更新安全启动 CA/密钥。此设备签名信息包含在此处。&#13;&#10;DeviceAttributes： BaseBoardManufacturer:Micro-Star International Co., Ltd.;FirmwareManufacturer:American Megatrends International, LLC.;FirmwareVersion:1.A32;OEMModelBaseBoard:MPG B850M EDGE TI MAX WIFI (MS-7E92);OEMManufacturerName:Micro-Star International Co., Ltd.;OSArchitecture:amd64;&#13;&#10;BucketId： 1853eab2fb32689d0ed0c2632d04df7cdc60eccb230b5e5e127bd5ce6e23d418&#13;&#10;BucketConfidenceLevel： High Confidence&#13;&#10;UpdateType： Windows UEFI CA 2023 (DB), Option ROM CA 2023 (DB), 3P UEFI CA 2023 (DB), KEK 2023, Boot Manager (2023)&#13;&#10;有关详细信息，请参阅 https://go.microsoft.com/fwlink/?linkid=2301018.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:25:27.5602710Z'/><EventRecordID>50857</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-PnP' Guid='{9c205a39-1250-487d-abd7-e831c6290539}'/><EventID>225</EventID><Version>2</Version><Level>3</Level><Task>223</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:25:26.5582014Z'/><EventRecordID>50856</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='164'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessId'>1960</Data><Data Name='ProcessNameLength'>48</Data><Data Name='ProcessName'>\Device\HarddiskVolume3\Windows\System32\dwm.exe</Data><Data Name='DeviceInstanceLength'>33</Data><Data Name='DeviceInstance'>DISPLAY\SAC2565\7&amp;d48cd3&amp;1&amp;UID256</Data><Data Name='CommandLineLength'>9</Data><Data Name='CommandLine'>"dwm.exe"</Data><Data Name='VetoingDevicesLength'>35</Data><Data Name='VetoingDevices'>DISPLAY\SAC2565\7&amp;d48cd3&amp;1&amp;UID256
</Data></EventData><RenderingInfo Culture='zh-CN'><Message>具有进程 ID 的应用程序\Device\HarddiskVolume3\Windows\System32\dwm.exe1960停止删除或弹出设备DISPLAY\SAC2565\7&amp;d48cd3&amp;1&amp;UID256.&#13;&#10;进程命令行： "dwm.exe"&#13;&#10;受影响设备的列表：&#13;&#10;DISPLAY\SAC2565\7&amp;d48cd3&amp;1&amp;UID256&#13;&#10;</Message><Level>警告</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-PnP</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:25:21.1261269Z'/><EventRecordID>50855</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Display'/><EventID Qualifiers='0'>4107</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:25:20.7837550Z'/><EventRecordID>50854</EventRecordID><Correlation/><Execution ProcessID='5780' ThreadID='0'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>在对 SetDisplayConfig() API 的调用中调用方指定了 SDC_FORCE_MODE_ENUMERATION 标志</Message><Level>信息</Level><Task>无</Task><Opcode>信息</Opcode><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:58.2351377Z'/><EventRecordID>50853</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='16072'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>AMDRyzenMasterDriverV32</Data><Data Name='ImagePath'>C:\Windows\system32\AMDRyzenMasterDriver.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>自动启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMDRyzenMasterDriverV32&#13;&#10;服务文件名: C:\Windows\system32\AMDRyzenMasterDriver.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 自动启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:38.8091089Z'/><EventRecordID>50852</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='4616'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMDSAFD</Data><Data Name='ImagePath'>\SystemRoot\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMDSAFD&#13;&#10;服务文件名: \SystemRoot\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:37.9155511Z'/><EventRecordID>50851</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='13804'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD Function Driver for HD Audio Service</Data><Data Name='ImagePath'>\SystemRoot\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_7a7031d15c801b8c\AtihdWT6.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD Function Driver for HD Audio Service&#13;&#10;服务文件名: \SystemRoot\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_7a7031d15c801b8c\AtihdWT6.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-UserModePowerService' Guid='{ce8dee0b-d539-4000-b0f8-77bed049c590}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>10</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:36.7314956Z'/><EventRecordID>50850</EventRecordID><Correlation/><Execution ProcessID='1708' ThreadID='2036'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessPath'>C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe</Data><Data Name='ProcessPid'>9800</Data><Data Name='OldSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data><Data Name='NewSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe (进程 ID: 9800)将策略方案从 {65426dee-edbb-4283-8ab3-54cb6e763e4e} 重置为 {65426dee-edbb-4283-8ab3-54cb6e763e4e}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-UserModePowerService' Guid='{ce8dee0b-d539-4000-b0f8-77bed049c590}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>10</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:32.7993337Z'/><EventRecordID>50849</EventRecordID><Correlation/><Execution ProcessID='1708' ThreadID='1784'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessPath'>C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe</Data><Data Name='ProcessPid'>9800</Data><Data Name='OldSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data><Data Name='NewSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe (进程 ID: 9800)将策略方案从 {65426dee-edbb-4283-8ab3-54cb6e763e4e} 重置为 {65426dee-edbb-4283-8ab3-54cb6e763e4e}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-UserModePowerService' Guid='{ce8dee0b-d539-4000-b0f8-77bed049c590}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>10</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:29.7905944Z'/><EventRecordID>50848</EventRecordID><Correlation/><Execution ProcessID='1708' ThreadID='1720'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessPath'>C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe</Data><Data Name='ProcessPid'>9800</Data><Data Name='OldSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data><Data Name='NewSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe (进程 ID: 9800)将策略方案从 {65426dee-edbb-4283-8ab3-54cb6e763e4e} 重置为 {65426dee-edbb-4283-8ab3-54cb6e763e4e}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-UserModePowerService' Guid='{ce8dee0b-d539-4000-b0f8-77bed049c590}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>10</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:18.7918454Z'/><EventRecordID>50847</EventRecordID><Correlation/><Execution ProcessID='1708' ThreadID='1788'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessPath'>C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe</Data><Data Name='ProcessPid'>6424</Data><Data Name='OldSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data><Data Name='NewSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe (进程 ID: 6424)将策略方案从 {65426dee-edbb-4283-8ab3-54cb6e763e4e} 重置为 {65426dee-edbb-4283-8ab3-54cb6e763e4e}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:16.8963155Z'/><EventRecordID>50846</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD Crash Defender Service</Data><Data Name='ImagePath'>%SystemRoot%\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendrsr.exe</Data><Data Name='ServiceType'>用户模式服务</Data><Data Name='StartType'>自动启动</Data><Data Name='AccountName'>LocalSystem</Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD Crash Defender Service&#13;&#10;服务文件名: %SystemRoot%\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendrsr.exe&#13;&#10;服务类型: 用户模式服务&#13;&#10;服务启动类型: 自动启动&#13;&#10;服务账户: LocalSystem</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:16.8908095Z'/><EventRecordID>50845</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD Crash Defender Driver</Data><Data Name='ImagePath'>\SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendr.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD Crash Defender Driver&#13;&#10;服务文件名: \SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendr.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:16.8852955Z'/><EventRecordID>50844</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD Crash Defender Manager Driver</Data><Data Name='ImagePath'>\SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendrmgr.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD Crash Defender Manager Driver&#13;&#10;服务文件名: \SystemRoot\System32\DriverStore\FileRepository\amdfendr.inf_amd64_b08edd5e3fe7eded\amdfendrmgr.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-UserModePowerService' Guid='{ce8dee0b-d539-4000-b0f8-77bed049c590}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>10</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:16.6550588Z'/><EventRecordID>50843</EventRecordID><Correlation/><Execution ProcessID='1708' ThreadID='1784'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ProcessPath'>C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe</Data><Data Name='ProcessPid'>6424</Data><Data Name='OldSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data><Data Name='NewSchemeGuid'>{65426dee-edbb-4283-8ab3-54cb6e763e4e}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atieclxx.exe (进程 ID: 6424)将策略方案从 {65426dee-edbb-4283-8ab3-54cb6e763e4e} 重置为 {65426dee-edbb-4283-8ab3-54cb6e763e4e}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:15.6006967Z'/><EventRecordID>50842</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD External Events Utility</Data><Data Name='ImagePath'>%SystemRoot%\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atiesrxx.exe</Data><Data Name='ServiceType'>用户模式服务</Data><Data Name='StartType'>自动启动</Data><Data Name='AccountName'>LocalSystem</Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD External Events Utility&#13;&#10;服务文件名: %SystemRoot%\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\atiesrxx.exe&#13;&#10;服务类型: 用户模式服务&#13;&#10;服务启动类型: 自动启动&#13;&#10;服务账户: LocalSystem</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:15.5956933Z'/><EventRecordID>50841</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>amduw23g-202643-a144ae36</Data><Data Name='ImagePath'>\SystemRoot\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\amdkmdag.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: amduw23g-202643-a144ae36&#13;&#10;服务文件名: \SystemRoot\System32\DriverStore\FileRepository\u0202643.inf_amd64_8835e06f359414be\B026283\amdkmdag.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:14.9075583Z'/><EventRecordID>50840</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='8976'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMD Controller Emulation</Data><Data Name='ImagePath'>\SystemRoot\System32\drivers\amdxe.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMD Controller Emulation&#13;&#10;服务文件名: \SystemRoot\System32\drivers\amdxe.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:14.3722722Z'/><EventRecordID>50839</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14116'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>Background Intelligent Transfer Service</Data><Data Name='param2'>自动启动</Data><Data Name='param3'>按需启动</Data><Data Name='param4'>BITS</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Background Intelligent Transfer Service 服务的启动类型从 自动启动 更改为 按需启动。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:00.3156449Z'/><EventRecordID>50838</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='7992'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>启动</Data><Data Name='param4'>Windows.SecurityCenter.WscBrokerManager</Data><Data Name='param5'>不可用</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>SYSTEM</Data><Data Name='param8'>S-1-5-18</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\SYSTEM SID (S-1-5-18)授予针对 CLSID 为 &#13;&#10;Windows.SecurityCenter.WscBrokerManager&#13;&#10;、APPID 为 &#13;&#10;不可用&#13;&#10; 的 COM 服务器应用程序的 本地 启动 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:24:00.3156449Z'/><EventRecordID>50837</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='4840'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>启动</Data><Data Name='param4'>Windows.SecurityCenter.SecurityAppBroker</Data><Data Name='param5'>不可用</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>SYSTEM</Data><Data Name='param8'>S-1-5-18</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\SYSTEM SID (S-1-5-18)授予针对 CLSID 为 &#13;&#10;Windows.SecurityCenter.SecurityAppBroker&#13;&#10;、APPID 为 &#13;&#10;不可用&#13;&#10; 的 COM 服务器应用程序的 本地 启动 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Ntfs' Guid='{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}'/><EventID>98</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000002</Keywords><TimeCreated SystemTime='2026-08-19T20:23:38.6161196Z'/><EventRecordID>50836</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='5584'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>??</Data><Data Name='DeviceName'>\Device\HarddiskVolumeShadowCopy6</Data><Data Name='CorruptionActionState'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>卷 ?? (\Device\HarddiskVolumeShadowCopy6) 运行状况良好。无需执行任何操作。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Volsnap' Guid='{cb017cd2-1f37-4e65-82bc-3e91f6a37559}' EventSourceName='volsnap'/><EventID Qualifiers='16390'>33</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:23:38.5074102Z'/><EventRecordID>50835</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='9940'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='DeviceName'>\Device\HarddiskVolumeShadowCopy2</Data><Data Name='VolumeName'>C:</Data><Data Name='NTSTATUS'>00000000</Data><Data Name='SourceTag'>178</Data><Data Name='SourceFileID'>0x0001</Data><Data Name='SourceLine'>6409</Data><Binary>00000000060030000000000021000640B20000000000000001000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>卷 C: 旧的卷影副本被删除以便把卷 C: 的卷影副本磁盘使用空间保持在用户设置的限制以下。</Message><Level>信息</Level><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Volsnap' Guid='{cb017cd2-1f37-4e65-82bc-3e91f6a37559}' EventSourceName='volsnap'/><EventID Qualifiers='16390'>33</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:23:38.5044094Z'/><EventRecordID>50834</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='5584'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='DeviceName'>\Device\HarddiskVolumeShadowCopy1</Data><Data Name='VolumeName'>C:</Data><Data Name='NTSTATUS'>00000000</Data><Data Name='SourceTag'>178</Data><Data Name='SourceFileID'>0x0001</Data><Data Name='SourceLine'>6409</Data><Binary>00000000060030000000000021000640B20000000000000000000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>卷 C: 旧的卷影副本被删除以便把卷 C: 的卷影副本磁盘使用空间保持在用户设置的限制以下。</Message><Level>信息</Level><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:40.9384301Z'/><EventRecordID>50833</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14044'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>HWiNFO Kernel Driver (v214)</Data><Data Name='ImagePath'>C:\Users\UaHeYu\AppData\Local\Temp\HWiNFO_x64_214.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: HWiNFO Kernel Driver (v214)&#13;&#10;服务文件名: C:\Users\UaHeYu\AppData\Local\Temp\HWiNFO_x64_214.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:39.0106886Z'/><EventRecordID>50832</EventRecordID><Correlation ActivityID='{571c6d31-3018-0004-afb0-1c571830dd01}'/><Execution ProcessID='1848' ThreadID='3024'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data><Data Name='param5'>{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data><Data Name='param6'>Asuka</Data><Data Name='param7'>UaHeYu</Data><Data Name='param8'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 Asuka\UaHeYu SID (S-1-5-21-2092180878-166494762-4224106802-1002)授予针对 CLSID 为 &#13;&#10;{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}&#13;&#10;、APPID 为 &#13;&#10;{15C20B67-12E7-4BB6-92BB-7AFF07997402}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:15.2802650Z'/><EventRecordID>50831</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14044'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV29</Data><Data Name='param2'>%%3</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600320039000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV29 服务启动失败: &#13;&#10;系统找不到指定的路径。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:15.2792640Z'/><EventRecordID>50830</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14044'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>AMDRyzenMasterDriverV29</Data><Data Name='ImagePath'>C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>自动启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: AMDRyzenMasterDriverV29&#13;&#10;服务文件名: C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 自动启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:15.2632621Z'/><EventRecordID>50829</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14044'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV29</Data><Data Name='param2'>%%3</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600320039000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV29 服务启动失败: &#13;&#10;系统找不到指定的路径。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:15.2119657Z'/><EventRecordID>50828</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14044'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ServiceName'>NTIOLib_CC_COMM</Data><Data Name='ImagePath'>C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: NTIOLib_CC_COMM&#13;&#10;服务文件名: C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1046</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:12.3137664Z'/><EventRecordID>50827</EventRecordID><Correlation/><Execution ProcessID='8116' ThreadID='5224'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FilesCount'>2</Data><Data Name='Files'>C:\Windows\Logs\MeasuredBoot\0000000128-0000000000.json</Data><Data Name='Files'>C:\Windows\Logs\MeasuredBoot\0000000129-0000000000.json</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已成功删除测量的启动文件。已删除以下 2 文件： </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1046</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:12.3056128Z'/><EventRecordID>50826</EventRecordID><Correlation/><Execution ProcessID='8116' ThreadID='5224'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FilesCount'>2</Data><Data Name='Files'>C:\Windows\Logs\MeasuredBoot\0000000128-0000000000.log</Data><Data Name='Files'>C:\Windows\Logs\MeasuredBoot\0000000129-0000000000.log</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已成功删除测量的启动文件。已删除以下 2 文件： </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1025</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:12.1868994Z'/><EventRecordID>50825</EventRecordID><Correlation/><Execution ProcessID='8116' ThreadID='5224'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>TPM 已成功预配，现在可以使用。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:07.7666114Z'/><EventRecordID>50824</EventRecordID><Correlation/><Execution ProcessID='15820' ThreadID='15824'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="MSI Center - Terminal Server" dir=in protocol=tcp localport=26822 action=allow</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:07.7152208Z'/><EventRecordID>50823</EventRecordID><Correlation/><Execution ProcessID='15756' ThreadID='15760'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - Terminal Server"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:07.5452689Z'/><EventRecordID>50822</EventRecordID><Correlation/><Execution ProcessID='15436' ThreadID='15440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='Sid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - Terminal Server"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\svchost.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7045</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.3091158Z'/><EventRecordID>50821</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='14116'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='ServiceName'>NTIOLib_MysticLight</Data><Data Name='ImagePath'>C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Lib\\NTIOLib_X64.sys</Data><Data Name='ServiceType'>内核模式驱动程序</Data><Data Name='StartType'>按需启动</Data><Data Name='AccountName'></Data></EventData><RenderingInfo Culture='zh-CN'><Message>服务已安装在系统中。&#13;&#10;&#13;&#10;服务名称: NTIOLib_MysticLight&#13;&#10;服务文件名: C:\Program Files (x86)\MSI\MSI Center\Mystic Light\Lib\\NTIOLib_X64.sys&#13;&#10;服务类型: 内核模式驱动程序&#13;&#10;服务启动类型: 按需启动&#13;&#10;服务账户: </Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>232</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.1383470Z'/><EventRecordID>50820</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully connected to port C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444) on switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444(Friendly Name: Default Switch).</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>7</EventID><Version>0</Version><Level>4</Level><Task>1004</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.1153883Z'/><EventRecordID>50819</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Miniport NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully initialized.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.1152866Z'/><EventRecordID>50818</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>4</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 启动</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.1132370Z'/><EventRecordID>50817</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>7</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Create" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.1132361Z'/><EventRecordID>50816</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>264</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.0254459Z'/><EventRecordID>50815</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>1</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已在交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)上成功创建内部或外部端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (易记名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>292</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:06.0251788Z'/><EventRecordID>50814</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='OldPortRscEnabled'>0</Data><Data Name='NewPortRscEnabled'>1</Data><Data Name='RscStateModifiedReason'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)上一个: 已禁用，当前: 已启用。原因: 端口创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>9</EventID><Version>0</Version><Level>4</Level><Task>1005</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583930Z'/><EventRecordID>50813</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>32</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) successfully initialized.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>232</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583553Z'/><EventRecordID>50812</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) successfully connected to port C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) on switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444(Friendly Name: Default Switch).</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583487Z'/><EventRecordID>50811</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>7</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Create" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583480Z'/><EventRecordID>50810</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>67</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583295Z'/><EventRecordID>50809</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已在交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)上成功创建端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>292</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:05.9583040Z'/><EventRecordID>50808</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3472'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFName'>Default Switch</Data><Data Name='OldPortRscEnabled'>0</Data><Data Name='NewPortRscEnabled'>1</Data><Data Name='RscStateModifiedReason'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 修改 RSC 卸载(友好名称: Default Switch)上一个: 已禁用，当前: 已启用。原因: 端口创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1282</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:22:04.4183543Z'/><EventRecordID>50807</EventRecordID><Correlation/><Execution ProcessID='8116' ThreadID='5224'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已生成 TBS 设备标识符。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5973508Z'/><EventRecordID>50806</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>8</Data><Data Name='NicInstanceId'>{35ccc77d-a5ed-4451-b1dc-9451d61286f5}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Delete" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 （友好名称： Default Switch）、实例 Id {35ccc77d-a5ed-4451-b1dc-9451d61286f5} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>62</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5291428Z'/><EventRecordID>50805</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>9</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已成功删除交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (友好名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5288543Z'/><EventRecordID>50804</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>8</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Delete" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>71</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5288397Z'/><EventRecordID>50803</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 的删除完成(易记名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>71</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5286690Z'/><EventRecordID>50802</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 的删除完成(易记名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>69</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5285055Z'/><EventRecordID>50801</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (易记名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)已成功删除–交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>234</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5283202Z'/><EventRecordID>50800</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 successfully disconnected from port C08CB7B8-9B3C-408E-8E30-5E16A3AEB445.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>69</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5177503Z'/><EventRecordID>50799</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)已成功删除–交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>234</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:22:02.5177399Z'/><EventRecordID>50798</EventRecordID><Correlation/><Execution ProcessID='3432' ThreadID='3528'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 successfully disconnected from port C08CB7B8-9B3C-408E-8E30-5E16A3AEB444.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='TPM' Guid='{1b6b0772-251b-4d42-917d-faca166bc059}'/><EventID>18</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:59.4174550Z'/><EventRecordID>50797</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='508'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='driverFile'>0x14</Data><Data Name='lineNumber'>217</Data><Data Name='Data'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>此事件会触发受信任的平台模块(TPM)预配/状态检查运行。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>TPM</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7026</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:59.3793906Z'/><EventRecordID>50796</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='1548'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>
dam</Data></EventData><RenderingInfo Culture='zh-CN'><Message>以下引导启动或系统启动驱动程序未加载: &#13;&#10;dam</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1038</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:57.1676074Z'/><EventRecordID>50795</EventRecordID><Correlation/><Execution ProcessID='2888' ThreadID='6952'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Path'>C:\Windows\Logs\MeasuredBoot\0000000230-0000000000.json</Data></EventData><RenderingInfo Culture='zh-CN'><Message>预证明运行状况检查确认设备应通过证明。&#13;&#10; 有关所做检查的详细信息，请参阅 C:\Windows\Logs\MeasuredBoot\0000000230-0000000000.json。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-TPM-WMI' Guid='{7d5387b0-cbe0-11da-a94d-0800200c9a66}'/><EventID>1041</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:57.1675541Z'/><EventRecordID>50794</EventRecordID><Correlation/><Execution ProcessID='2888' ThreadID='6952'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Json'>{"Version":2,"HealthStatus":"Attestable","Required":[{"Field":"TpmPresent","Value":true,"DesiredValue":true},{"Field":"TpmMeetsMinimumVersion","Value":true,"DesiredValue":true},{"Field":"TpmIsResponsive","Value":true,"DesiredValue":true},{"Field":"EkCertIsAvailable","Value":true,"DesiredValue":true},{"Field":"TcgLogFound","Value":true,"DesiredValue":true}],"Expected":[{"Field":"PcrsMatchTcgLog","Value":true,"DesiredValue":true}],"Informational":[{"Field":"SecureBootEnabled","ValueFromComputer":true,"ValueFromTcgLog":true,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"VirtualSecureMemory","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"SecureCorePCCompliant","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"MostRecentBootTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"CurrentTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"EkCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP384IsAvailable","Value":false,"DesiredValue":true},{"Field":"WindowsAikCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP384IsAvailable","Value":false,"DesiredValue":true}]}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>预证明运行状况检查详细信息: {"Version":2,"HealthStatus":"Attestable","Required":[{"Field":"TpmPresent","Value":true,"DesiredValue":true},{"Field":"TpmMeetsMinimumVersion","Value":true,"DesiredValue":true},{"Field":"TpmIsResponsive","Value":true,"DesiredValue":true},{"Field":"EkCertIsAvailable","Value":true,"DesiredValue":true},{"Field":"TcgLogFound","Value":true,"DesiredValue":true}],"Expected":[{"Field":"PcrsMatchTcgLog","Value":true,"DesiredValue":true}],"Informational":[{"Field":"SecureBootEnabled","ValueFromComputer":true,"ValueFromTcgLog":true,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"VirtualSecureMemory","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"SecureCorePCCompliant","ValueFromComputer":false,"ValueFromTcgLog":false,"DesiredValue":true,"TcgValueIsVerifiable":true},{"Field":"MostRecentBootTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"CurrentTcgLogFoundInFileSystem","Value":true,"DesiredValue":true},{"Field":"EkCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"EkCertEccP384IsAvailable","Value":false,"DesiredValue":true},{"Field":"WindowsAikCertRsa2048IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP256IsAvailable","Value":true,"DesiredValue":true},{"Field":"WindowsAikCertEccP384IsAvailable","Value":false,"DesiredValue":true}]}</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-TPM-WMI</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.5422179Z'/><EventRecordID>50793</EventRecordID><Correlation/><Execution ProcessID='12068' ThreadID='12072'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="MSI Center - SyncServer" dir=in protocol=tcp localport=33683 action=allow</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.4882220Z'/><EventRecordID>50792</EventRecordID><Correlation/><Execution ProcessID='11876' ThreadID='11880'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - SyncServer"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.4882076Z'/><EventRecordID>50791</EventRecordID><Correlation/><Execution ProcessID='11856' ThreadID='11860'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="MSI Center Bridge" dir=in protocol=tcp localport=32683 action=allow</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.4357029Z'/><EventRecordID>50790</EventRecordID><Correlation/><Execution ProcessID='11736' ThreadID='11740'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center - SyncServer"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.4356900Z'/><EventRecordID>50789</EventRecordID><Correlation/><Execution ProcessID='11744' ThreadID='11748'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center Bridge"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:56.3787119Z'/><EventRecordID>50788</EventRecordID><Correlation/><Execution ProcessID='11600' ThreadID='11604'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>"C:\Windows\system32\netsh.exe" advfirewall firewall del rule name="MSI Center Bridge"</Data><Data Name='Parent Process 1'>C:\Windows\SysWOW64\netsh.exe</Data><Data Name='Parent Process 2'>C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe</Data><Data Name='Parent Process 3'>C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 6'></Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.9128948Z'/><EventRecordID>50787</EventRecordID><Correlation/><Execution ProcessID='9440' ThreadID='9484'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TrustletIdentity'>6</Data><Data Name='NormalProcessId'>9524</Data><Data Name='Status'>0</Data><Data Name='ImageName'>\??\C:\Windows\System32\NgcIso.exe</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet \??\C:\Windows\System32\NgcIso.exe Id 6 and Pid 9524 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.9122935Z'/><EventRecordID>50786</EventRecordID><Correlation/><Execution ProcessID='9440' ThreadID='9484'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.4808016Z'/><EventRecordID>50785</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='5752'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{00000000-0000-0000-0000-000000000000}</Data><Data Name='param5'>{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>LOCAL SERVICE</Data><Data Name='param8'>S-1-5-19</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19)授予针对 CLSID 为 &#13;&#10;{00000000-0000-0000-0000-000000000000}&#13;&#10;、APPID 为 &#13;&#10;{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.4782967Z'/><EventRecordID>50784</EventRecordID><Correlation/><Execution ProcessID='1848' ThreadID='5752'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{00000000-0000-0000-0000-000000000000}</Data><Data Name='param5'>{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>LOCAL SERVICE</Data><Data Name='param8'>S-1-5-19</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19)授予针对 CLSID 为 &#13;&#10;{00000000-0000-0000-0000-000000000000}&#13;&#10;、APPID 为 &#13;&#10;{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-WLAN-AutoConfig' Guid='{9580d7dd-0379-4658-9870-d5be7d52d6de}'/><EventID>10001</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.2979712Z'/><EventRecordID>50783</EventRecordID><Correlation/><Execution ProcessID='4720' ThreadID='4856'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ExtensibleModulePath'>C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_33f43f5576fe24c1\mtkihvx.dll</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已成功启动 WLAN 扩展模块。&#13;&#10;&#13;&#10;模块路径: C:\Windows\System32\DriverStore\FileRepository\mtkwecx.inf_amd64_33f43f5576fe24c1\mtkihvx.dll&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-WLAN-AutoConfig</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-WLAN-AutoConfig' Guid='{9580d7dd-0379-4658-9870-d5be7d52d6de}'/><EventID>4000</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>1</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:54.2810879Z'/><EventRecordID>50782</EventRecordID><Correlation/><Execution ProcessID='4720' ThreadID='4856'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已成功启动 WLAN 自动配置服务。&#13;&#10;</Message><Level>信息</Level><Opcode>开始</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-WLAN-AutoConfig</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>113</EventID><Version>0</Version><Level>4</Level><Task>5</Task><Opcode>122</Opcode><Keywords>0x4000000000000040</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.7387483Z'/><EventRecordID>50781</EventRecordID><Correlation/><Execution ProcessID='5344' ThreadID='8144'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='UrlGroupId'>18302628942005141505</Data><Data Name='Url'>http://localhost:1462/</Data><Data Name='Status'>0</Data><Data Name='ProcessId'>5344</Data><Data Name='ExecutablePath'>\Device\HarddiskVolume3\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe</Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试将 URL (http://localhost:1462/)添加到 URL 组(0xFE00000D20000001)。状态： 0x0。用户 S-1-5-18 0x14E0可执行文件路径\Device\HarddiskVolume3\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe进程 ID</Message><Level>信息</Level><Task>HTTP Configuration Property Trace Task</Task><Opcode>AddUrl</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events triggered on a URL group</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>111</EventID><Version>0</Version><Level>4</Level><Task>5</Task><Opcode>125</Opcode><Keywords>0x4000000000000040</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.7385793Z'/><EventRecordID>50780</EventRecordID><Correlation/><Execution ProcessID='5344' ThreadID='8144'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='UrlGroupId'>18302628942005141505</Data><Data Name='Status'>0</Data><Data Name='ProcessId'>5344</Data><Data Name='ExecutablePath'>\Device\HarddiskVolume3\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe</Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>创建 URL 组0xFE00000D20000001。状态0x0。进程 ID 0x14E0可执行文件路径\Device\HarddiskVolume3\Program Files (x86)\MSI\MSI Center\Mystic Light\LightKeeperService.exe，用户 S-1-5-18</Message><Level>信息</Level><Task>HTTP Configuration Property Trace Task</Task><Opcode>CreateUrlGroup</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events triggered on a URL group</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1589615Z'/><EventRecordID>50779</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='2712'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV31</Data><Data Name='param2'>%%2</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600330031000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV31 服务启动失败: &#13;&#10;系统找不到指定的文件。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='49152'>7000</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1589615Z'/><EventRecordID>50778</EventRecordID><Correlation/><Execution ProcessID='1544' ThreadID='2708'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='param1'>AMDRyzenMasterDriverV29</Data><Data Name='param2'>%%3</Data><Binary>41004D004400520079007A0065006E004D00610073007400650072004400720069007600650072005600320039000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>由于下列错误，AMDRyzenMasterDriverV29 服务启动失败: &#13;&#10;系统找不到指定的路径。</Message><Level>错误</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10016</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1105904Z'/><EventRecordID>50777</EventRecordID><Correlation ActivityID='{571c6d31-3018-000b-c46e-1c571830dd01}'/><Execution ProcessID='1848' ThreadID='4840'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-20'/></System><EventData><Data Name='param1'>应用程序-特定</Data><Data Name='param2'>本地</Data><Data Name='param3'>激活</Data><Data Name='param4'>{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}</Data><Data Name='param5'>{2ED83BAA-B2FD-43B1-99BF-E6149C622692}</Data><Data Name='param6'>NT AUTHORITY</Data><Data Name='param7'>NETWORK SERVICE</Data><Data Name='param8'>S-1-5-20</Data><Data Name='param9'>LocalHost (使用 LRPC)</Data><Data Name='param10'>不可用</Data><Data Name='param11'>不可用</Data></EventData><RenderingInfo Culture='zh-CN'><Message>应用程序-特定 权限设置并未向在应用程序容器 不可用 SID (不可用)中运行的地址 LocalHost (使用 LRPC) 中的用户 NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20)授予针对 CLSID 为 &#13;&#10;{9EA82395-E31B-41CA-8DF7-EC1CEE7194DF}&#13;&#10;、APPID 为 &#13;&#10;{2ED83BAA-B2FD-43B1-99BF-E6149C622692}&#13;&#10; 的 COM 服务器应用程序的 本地 激活 权限。此安全权限可以使用组件服务管理工具进行修改。</Message><Level>警告</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1040147Z'/><EventRecordID>50776</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1040080Z'/><EventRecordID>50775</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:10246/MDEServer/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:10246/MDEServer/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1040034Z'/><EventRecordID>50774</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:10247/apps/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:10247/apps/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039991Z'/><EventRecordID>50773</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>https://+:3392/rdp/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL https://+:3392/rdp/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039935Z'/><EventRecordID>50772</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:80/116B50EB-ECE2-41ac-8429-9F9E963361B7/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039895Z'/><EventRecordID>50771</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL https://+:443/C574AC30-5794-4AEE-B1BB-6651C5315029/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039831Z'/><EventRecordID>50770</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:80/0131501b-d67f-491b-9a40-c4bf27bcb4d4/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039752Z'/><EventRecordID>50769</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:5985/wsman/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:5985/wsman/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039703Z'/><EventRecordID>50768</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:47001/wsman/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:47001/wsman/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039646Z'/><EventRecordID>50767</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>https://+:5986/wsman/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL https://+:5986/wsman/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039580Z'/><EventRecordID>50766</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://*:2869/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://*:2869/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039544Z'/><EventRecordID>50765</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>https://*:5358/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL https://*:5358/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039498Z'/><EventRecordID>50764</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://+:80/Temporary_Listen_Addresses/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://+:80/Temporary_Listen_Addresses/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HttpService' Guid='{dd5ef90a-6398-47a4-ad34-4dcecdef795f}'/><EventID>112</EventID><Version>0</Version><Level>4</Level><Task>3</Task><Opcode>121</Opcode><Keywords>0x4000000000000001</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.1039416Z'/><EventRecordID>50763</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Url'>http://*:5357/</Data><Data Name='ReserveStatus'>0</Data><Data Name='ProcessId'>4</Data><Data Name='ExecutablePath'></Data><Data Name='UserSid'>S-1-5-18</Data></EventData><RenderingInfo Culture='zh-CN'><Message>尝试保留 URL http://*:5357/。状态0x0。用户 S-1-5-18 0x4可执行文件路径的进程 ID</Message><Level>信息</Level><Task>HTTP Setup Trace Task</Task><Opcode>ResvUrlV2</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-HttpService</Provider><Keywords><Keyword>Flagged on all HTTP events dealing with service setup</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Winlogon' Guid='{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}'/><EventID>7001</EventID><Version>0</Version><Level>4</Level><Task>1101</Task><Opcode>0</Opcode><Keywords>0x2000200000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:53.0491494Z'/><EventRecordID>50762</EventRecordID><Correlation/><Execution ProcessID='1460' ThreadID='1944'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TSId'>1</Data><Data Name='UserSid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data></EventData><RenderingInfo Culture='zh-CN'><Message>客户体验改善计划的用户登录通知</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Winlogon</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DHCPv6-Client' Guid='{6a1f2b00-6a90-4c38-95a5-5cab3b056778}'/><EventID>51046</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>62</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7704410Z'/><EventRecordID>50761</EventRecordID><Correlation/><Execution ProcessID='3236' ThreadID='3396'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv6 客户端服务已启动</Message><Level>信息</Level><Task>Service State Event</Task><Opcode>ServiceStart</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-DHCPv6-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50036</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>68</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7623518Z'/><EventRecordID>50760</EventRecordID><Correlation/><Execution ProcessID='3236' ThreadID='3340'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 客户端服务已启动</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceStart</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50103</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>129</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7623113Z'/><EventRecordID>50759</EventRecordID><Correlation/><Execution ProcessID='3236' ThreadID='3340'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已针对关闭通知注册 DHCPv4 客户端</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceShutdown</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50036</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>68</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7622461Z'/><EventRecordID>50758</EventRecordID><Correlation/><Execution ProcessID='3236' ThreadID='3340'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 客户端服务已启动</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceStart</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7391847Z'/><EventRecordID>50757</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>7</Data><Data Name='DeviceName'>bindflt</Data><Data Name='DeviceTime'>1997-10-04T08:48:21.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“bindflt”(10.0，‎1997‎-‎10‎-‎04T08:48:21.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7330848Z'/><EventRecordID>50756</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>15</Data><Data Name='DeviceName'>MessageTransfer</Data><Data Name='DeviceTime'>2026-08-12T18:49:48.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“MessageTransfer”(10.0，‎2026‎-‎08‎-‎12T18:49:48.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7134661Z'/><EventRecordID>50755</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>10</Data><Data Name='DeviceName'>storqosflt</Data><Data Name='DeviceTime'>2051-09-16T10:31:38.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“storqosflt”(10.0，‎2051‎-‎09‎-‎16T10:31:38.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7069612Z'/><EventRecordID>50754</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>7</Data><Data Name='DeviceName'>UnionFS</Data><Data Name='DeviceTime'>2069-02-06T04:45:31.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“UnionFS”(10.0，‎2069‎-‎02‎-‎06T04:45:31.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7023264Z'/><EventRecordID>50753</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>6</Data><Data Name='DeviceName'>CldFlt</Data><Data Name='DeviceTime'>2096-07-17T04:30:39.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“CldFlt”(10.0，‎2096‎-‎07‎-‎17T04:30:39.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7022120Z'/><EventRecordID>50752</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>6</Data><Data Name='DeviceName'>CldFlt</Data><Data Name='DeviceTime'>2096-07-17T04:30:39.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“CldFlt”(版本 10.0，‎2096‎-‎07‎-‎17T04:30:39.000000000Z)已成功卸载。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.7022057Z'/><EventRecordID>50751</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>6</Data><Data Name='DeviceName'>CldFlt</Data><Data Name='DeviceTime'>2096-07-17T04:30:39.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“CldFlt”(10.0，‎2096‎-‎07‎-‎17T04:30:39.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.6925417Z'/><EventRecordID>50750</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='276'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>5</Data><Data Name='DeviceName'>luafv</Data><Data Name='DeviceTime'>2080-07-22T02:18:14.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“luafv”(10.0，‎2080‎-‎07‎-‎22T02:18:14.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.6864859Z'/><EventRecordID>50749</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='408'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>5</Data><Data Name='DeviceName'>wcifs</Data><Data Name='DeviceTime'>2093-08-15T19:45:54.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“wcifs”(10.0，‎2093‎-‎08‎-‎15T19:45:54.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.6788590Z'/><EventRecordID>50748</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='240'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>3</Data><Data Name='DeviceName'>bfs</Data><Data Name='DeviceTime'>2089-03-04T06:46:40.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“bfs”(10.0，‎2089‎-‎03‎-‎04T06:46:40.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Directory-Services-SAM' Guid='{0d4fdc09-8c27-494a-bda0-505e4fd8adae}'/><EventID>16983</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.1835241Z'/><EventRecordID>50747</EventRecordID><Correlation ActivityID='{571c6d31-3018-000e-136e-1c571830dd01}'/><Execution ProcessID='1572' ThreadID='1576'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData Name='SAMMSG_AUDIT_LEGACY_PWD_RPC_METHODS_OFF'></EventData><RenderingInfo Culture='zh-CN'><Message>安全账户管理器现在将记录负责调用旧密码更改或设置 RPC 方法的远程客户端的定期摘要事件。&#13;&#10;&#13;&#10;有关详细信息，请参阅 https://go.microsoft.com/fwlink/?linkid=2150956。&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Directory-Services-SAM</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Directory-Services-SAM' Guid='{0d4fdc09-8c27-494a-bda0-505e4fd8adae}'/><EventID>16977</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.1835207Z'/><EventRecordID>50746</EventRecordID><Correlation ActivityID='{571c6d31-3018-000e-136e-1c571830dd01}'/><Execution ProcessID='1572' ThreadID='1576'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData Name='SAMMSG_MINPWDLEN_SETTINGS_IN_EFFECT'><Data Name='MinimumPasswordLength'>0</Data><Data Name='RelaxMinimumPasswordLengthLimits'>0</Data><Data Name='MinimumPasswordLengthAudit'>-1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>使用以下最小密码长度的相关设置配置域。&#13;&#10;&#13;&#10;MinimumPasswordLength: 0&#13;&#10;&#13;&#10;RelaxMinimumPasswordLengthLimits: 0&#13;&#10;&#13;&#10;MinimumPasswordLengthAudit: -1&#13;&#10;&#13;&#10;有关详细信息，请访问 https://go.microsoft.com/fwlink/?LinkId=2097191。&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Directory-Services-SAM</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Directory-Services-SAM' Guid='{0d4fdc09-8c27-494a-bda0-505e4fd8adae}'/><EventID>16962</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.1796277Z'/><EventRecordID>50745</EventRecordID><Correlation ActivityID='{571c6d31-3018-000e-136e-1c571830dd01}'/><Execution ProcessID='1572' ThreadID='1576'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData Name='SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD'><Data Name='Default SD String:'>O:SYG:SYD:(A;;RC;;;BA)</Data></EventData><RenderingInfo Culture='zh-CN'><Message>对 SAM 数据库进行远程调用时，受到默认安全描述符的限制: O:SYG:SYD:(A;;RC;;;BA)。&#13;&#10;有关详细信息，请参阅 http://go.microsoft.com/fwlink/?LinkId=787651。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Directory-Services-SAM</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.1564350Z'/><EventRecordID>50744</EventRecordID><Correlation/><Execution ProcessID='1572' ThreadID='1576'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='LsaSrv' Guid='{199fe037-2b82-40a9-82ac-e1d46c792b99}'/><EventID>6156</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.0923657Z'/><EventRecordID>50743</EventRecordID><Correlation/><Execution ProcessID='1572' ThreadID='1576'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HardwareChecks'>1</Data><Data Name='ADDomainJoin'>0</Data><Data Name='AADDomainJoin'>0</Data><Data Name='IsLicensed'>0</Data><Data Name='DomainController'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Credential Guard 自动启用状态。基于虚拟化的安全的 &#13;&#10;&#13;&#10;Hardware 要求：&#9;1&#13;&#10;Domain Joined:&#9;0&#13;&#10;Azure AD Joined:&#9;0&#13;&#10; Licensed for Credential Guard:&#9;0&#13;&#10;Domain Controller:&#9;0</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-LSA</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.9514933Z'/><EventRecordID>50742</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Level'>4</Data></EventData><RenderingInfo Culture='zh-CN'><Message>LSASS.exe 已作为级别为 4 的受保护进程启动。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>18</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.9508672Z'/><EventRecordID>50741</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>VBS 密钥隔离已启动，并将保护 VSM 隔离的密钥。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.9494806Z'/><EventRecordID>50740</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TrustletIdentity'>1</Data><Data Name='NormalProcessId'>1552</Data><Data Name='Status'>0</Data><Data Name='ImageName'>\??\C:\Windows\system32\lsaiso.exe</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet \??\C:\Windows\system32\lsaiso.exe Id 1 and Pid 1552 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.9491951Z'/><EventRecordID>50739</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>14</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.9474468Z'/><EventRecordID>50738</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Config'>0</Data><Data Name='IsTestConfig'>0</Data><Data Name='IsAutoEnabled'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Credential Guard 配置：&#13;&#10;&#13;&#10;注册表配置： 0x0&#13;&#10;测试配置： 0&#13;&#10;自动启用： 0</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>23</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.8412869Z'/><EventRecordID>50737</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HRESULT'>0</Data><Data Name='NewTimerNeeded'>false</Data><Data Name='NewTimerWaitingUpdateCompletion'>false</Data><Data Name='PreviousTimerExistsButDisabled'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>启动应用反回滚： 初始化已完成，状态为：&#13;&#10;HRESULT： 操作成功完成。&#13;&#10;需要新计时器： false&#13;&#10;等待系统更新完成的新计时器： false&#13;&#10;以前的闩锁计时器存在，但被注册表禁用： false&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>25</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.8408702Z'/><EventRecordID>50736</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HRESULT'>0</Data><Data Name='PreviousTimerExists'>true</Data><Data Name='PreviousTimerStartTime'>2026-07-18T11:01:54.8815194Z</Data><Data Name='GracePeriod'>51840000000000</Data><Data Name='AttemptedRecoveryEnforcementSucceeded'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>启动应用防回退： 上一个计时器已恢复，状态为：&#13;&#10;&#13;&#10;HRESULT： 操作成功完成。&#13;&#10;以前的计时器存在： true&#13;&#10;开始时间： ‎2026‎-‎07‎-‎18T11:01:54.881519400Z&#13;&#10;宽限期： 51840000000000&#13;&#10;尝试的恢复强制执行成功： false&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>24</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.8408698Z'/><EventRecordID>50735</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='win32Error'>0</Data><Data Name='FileStartTime'>2026-07-18T11:01:54.8815194Z</Data><Data Name='GracePeriod'>51840000000000</Data><Data Name='DueTime'>2026-09-16T11:01:54.8815194Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>启动应用反回滚： 计时器启动已完成，状态为：&#13;&#10;&#13;&#10;Win32Error： 0&#13;&#10;开始时间： ‎2026‎-‎07‎-‎18T11:01:54.881519400Z&#13;&#10;宽限期： 51840000000000&#13;&#10;截止时间： ‎2026‎-‎09‎-‎16T11:01:54.881519400Z&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Wininit' Guid='{206f6dea-d3c5-4d10-bc72-989f03c8b84b}'/><EventID>19</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:51.8408328Z'/><EventRecordID>50734</EventRecordID><Correlation/><Execution ProcessID='1380' ThreadID='1384'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HRESULT'>0</Data><Data Name='NewLatchTimerNeeded'>false</Data><Data Name='NewLatchTimerWaitingSystemUpdateCompletion'>false</Data><Data Name='PreviousLatchTimerExistsButDisabled'>false</Data><Data Name='PolicyFileExists'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>基于虚拟化的安全性新计时器创建状态&#13;&#10;&#13;&#10;HRESULT: 操作成功完成。&#13;&#10;需要新的闩锁计时器: false&#13;&#10;等待系统更新完成的新闩锁计时器: false&#13;&#10;现有闩锁计时器存在，但注册表已禁用: false&#13;&#10;策略文件存在: false&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Wininit</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='BTHUSB'/><EventID Qualifiers='16389'>18</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:50.3745655Z'/><EventRecordID>50733</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='408'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Binary>00000800010000000000000012000540000000000000000000000000000000000000000000000000E000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>Windows 无法在本地适配器上存储蓝牙身份验证代码(链接密钥)。启动时，蓝牙键盘可能无法在系统 BIOS 中工作。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='mtkwecx'/><EventID Qualifiers='16386'>2003</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:42.2537615Z'/><EventRecordID>50732</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Binary>000008000100000000000000D30702400000000000000000010001000300000000000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>D3 cold support</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='mtkwecx'/><EventID Qualifiers='16386'>7002</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:42.2537615Z'/><EventRecordID>50731</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Binary>0000100001000000000000005A1B024000000000000000000100010002000000000000000000000000000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>SAR Info</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='mtkwecx'/><EventID Qualifiers='16386'>7000</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:42.0118959Z'/><EventRecordID>50730</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='248'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Binary>00000C000100000000000000581B024000000000000000000100010001000000000000000000000038C000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>Low Power Information</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>24</EventID><Version>0</Version><Level>4</Level><Task>11</Task><Opcode>0</Opcode><Keywords>0x8000000000000010</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.7540537Z'/><EventRecordID>50729</EventRecordID><Correlation/><Execution ProcessID='280' ThreadID='1104'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ExitReason'>0</Data><Data Name='CurrentBias'>-480</Data><Data Name='CurrentTimeZoneID'>0</Data><Data Name='TimeZoneInfoCacheUpdated'>0</Data><Data Name='FirstRefresh'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已刷新时区信息，退出原因为 0。当前时区偏差为 -480。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider><Keywords><Keyword>Time</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Ntfs' Guid='{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}'/><EventID>98</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000002</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.7225941Z'/><EventRecordID>50728</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>\\?\Volume{8ada190b-fd8e-4fd7-a44c-596902d56c8e}</Data><Data Name='DeviceName'>\Device\HarddiskVolume4</Data><Data Name='CorruptionActionState'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>卷 \\?\Volume{8ada190b-fd8e-4fd7-a44c-596902d56c8e} (\Device\HarddiskVolume4) 运行状况良好。无需执行任何操作。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5670433Z'/><EventRecordID>50727</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>15</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>112</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 15 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 112&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5664514Z'/><EventRecordID>50726</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>14</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>112</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 14 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 112&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5661528Z'/><EventRecordID>50725</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>13</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>115</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 13 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 115&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5657571Z'/><EventRecordID>50724</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>12</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>115</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 12 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 115&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5482921Z'/><EventRecordID>50723</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>11</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>129</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 11 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 129&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5479182Z'/><EventRecordID>50722</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>10</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>129</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 10 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 129&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5476035Z'/><EventRecordID>50721</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>9</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>122</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 9 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 122&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5472281Z'/><EventRecordID>50720</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>8</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>122</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 8 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 122&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5469280Z'/><EventRecordID>50719</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>7</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>118</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 7 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 118&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5465495Z'/><EventRecordID>50718</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>6</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>118</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 6 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 118&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5462303Z'/><EventRecordID>50717</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>5</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>125</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 5 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 125&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5458651Z'/><EventRecordID>50716</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>4</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>125</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 4 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 125&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5455445Z'/><EventRecordID>50715</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>3</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>132</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 3 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 132&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5451628Z'/><EventRecordID>50714</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>2</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>132</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 2 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 132&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5448350Z'/><EventRecordID>50713</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>1</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>132</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 1 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 132&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Processor-Power' Guid='{0f67e49f-fe51-4e9f-b490-6f2948cc6027}'/><EventID>55</EventID><Version>0</Version><Level>4</Level><Task>47</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.5444253Z'/><EventRecordID>50712</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Group'>0</Data><Data Name='Number'>0</Data><Data Name='IdleStateCount'>1</Data><Data Name='IdleImplementation'>1</Data><Data Name='NominalFrequency'>4700</Data><Data Name='MaximumPerformancePercent'>132</Data><Data Name='MinimumPerformancePercent'>12</Data><Data Name='MinimumThrottlePercent'>12</Data><Data Name='PerformanceImplementation'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>组 0 中的处理器 0 显示下列电源管理功能:&#13;&#10;&#13;&#10;空闲状态类型: ACPI Idle (C) States (1 状态)&#13;&#10;&#13;&#10;性能状态类型: ACPI Collaborative Processor Performance Control&#13;&#10;标称频率(MHz): 4700&#13;&#10;最佳性能百分比: 132&#13;&#10;最低性能百分比: 12&#13;&#10;最低限制百分比: 12</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Processor-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Ntfs' Guid='{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}'/><EventID>98</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000002</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.4637088Z'/><EventRecordID>50711</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='444'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>D:</Data><Data Name='DeviceName'>\Device\HarddiskVolume6</Data><Data Name='CorruptionActionState'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>卷 D: (\Device\HarddiskVolume6) 运行状况良好。无需执行任何操作。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Ntfs' Guid='{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}'/><EventID>98</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000002</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.4255448Z'/><EventRecordID>50710</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>E:</Data><Data Name='DeviceName'>\Device\HarddiskVolume8</Data><Data Name='CorruptionActionState'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>卷 E: (\Device\HarddiskVolume8) 运行状况良好。无需执行任何操作。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>1003</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3034863Z'/><EventRecordID>50709</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Miniport NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully enabled</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>232</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3034841Z'/><EventRecordID>50708</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully connected to port C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444) on switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444(Friendly Name: Default Switch).</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>7</EventID><Version>0</Version><Level>4</Level><Task>1004</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3030815Z'/><EventRecordID>50707</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Miniport NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (Friendly Name: Default Switch) successfully initialized.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3030448Z'/><EventRecordID>50706</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>4</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 启动</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3026559Z'/><EventRecordID>50705</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>7</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Create" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3026556Z'/><EventRecordID>50704</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>264</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025932Z'/><EventRecordID>50703</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFNameLen'>46</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>1</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已在交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)上成功创建内部或外部端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 (易记名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>292</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025653Z'/><EventRecordID>50702</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB445</Data><Data Name='PortFName'>Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='OldPortRscEnabled'>0</Data><Data Name='NewPortRscEnabled'>1</Data><Data Name='RscStateModifiedReason'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB445 修改 RSC 卸载(友好名称: Host Vnic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444)上一个: 已禁用，当前: 已启用。原因: 端口创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>9</EventID><Version>0</Version><Level>4</Level><Task>1005</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025382Z'/><EventRecordID>50701</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>32</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) successfully initialized.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>232</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025328Z'/><EventRecordID>50700</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data></EventData><RenderingInfo Culture='zh-CN'><Message>NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) successfully connected to port C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (Friendly Name: Default Switch) on switch C08CB7B8-9B3C-408E-8E30-5E16A3AEB444(Friendly Name: Default Switch).</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>233</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025271Z'/><EventRecordID>50699</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicNameLen'>36</Data><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFNameLen'>14</Data><Data Name='NicFName'>Default Switch</Data><Data Name='Operation'>7</Data><Data Name='NicInstanceId'>{00000000-0000-0000-0000-000000000000}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作 "Create" 在 nic C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 （友好名称： Default Switch）、实例 Id {00000000-0000-0000-0000-000000000000} 上成功。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>291</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025267Z'/><EventRecordID>50698</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NicName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='NicFName'>Default Switch</Data><Data Name='OldNicIPv4RscEnabled'>0</Data><Data Name='OldNicIPv6RscEnabled'>0</Data><Data Name='NewNicIPv4RscEnabled'>0</Data><Data Name='NewNicIPv6RscEnabled'>0</Data><Data Name='RscStateModifiedReason'>3</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为 NIC C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 修改 RSC 卸载(友好名称: Default Switch)以前的 IPv4: 已禁用，当前 IPv4: 已禁用，以前的 IPv6: 已禁用，当前 IPv6: 已禁用。原因: NIC 创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>67</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000081</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025200Z'/><EventRecordID>50697</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='PortNameLen'>36</Data><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFNameLen'>14</Data><Data Name='PortFName'>Default Switch</Data><Data Name='SwitchNameLen'>36</Data><Data Name='SwitchName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='SwitchFNameLen'>14</Data><Data Name='SwitchFName'>Default Switch</Data><Data Name='Flags'>0</Data><Data Name='OwnerService'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已在交换机 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)上成功创建端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 (易记名称: Default Switch)。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>292</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3025011Z'/><EventRecordID>50696</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='PortName'>C08CB7B8-9B3C-408E-8E30-5E16A3AEB444</Data><Data Name='PortFName'>Default Switch</Data><Data Name='OldPortRscEnabled'>0</Data><Data Name='NewPortRscEnabled'>1</Data><Data Name='RscStateModifiedReason'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已为端口 C08CB7B8-9B3C-408E-8E30-5E16A3AEB444 修改 RSC 卸载(友好名称: Default Switch)上一个: 已禁用，当前: 已启用。原因: 端口创建</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-VmSwitch' Guid='{67dc0d66-3695-47c0-9642-33f76f7bd7ad}'/><EventID>277</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.3019164Z'/><EventRecordID>50695</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='440'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='BuildNumber'>26100</Data><Data Name='BuildArch'>amd64</Data><Data Name='BuildBranch'>ge_release_svc_prod1</Data><Data Name='Debug'>false</Data><Data Name='Official'>true</Data><Data Name='Date'>Aug  8 2026</Data><Data Name='Time'>09:35:10</Data></EventData><RenderingInfo Culture='zh-CN'><Message>vmswitch.sys 版本 26100.amd64.ge_release_svc_prod1，调试 false，正式 true，Aug  8 2026 09:35:10</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-VmSwitch</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>172</EventID><Version>0</Version><Level>4</Level><Task>203</Task><Opcode>0</Opcode><Keywords>0x8000000000000404</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.2632473Z'/><EventRecordID>50694</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='300'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='State'>2</Data><Data Name='Reason'>6</Data></EventData><RenderingInfo Culture='zh-CN'><Message>备用连接状态: Disconnected，原因: NIC compliance</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.2275745Z'/><EventRecordID>50693</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>9</Data><Data Name='DeviceName'>npsvctrig</Data><Data Name='DeviceTime'>1978-05-14T17:13:30.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“npsvctrig”(10.0，‎1978‎-‎05‎-‎14T17:13:30.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='VfpExt'/><EventID Qualifiers='16384'>7036</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.1931045Z'/><EventRecordID>50692</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='452'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Data>Driver load complete</Data><Binary>0000040002003000000000007C1B004000000000000000000000000000000000000000000000000059000600</Binary></EventData><RenderingInfo Culture='zh-CN'><Message> 服务处于 Driver load complete 状态。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='VfpExt'/><EventID Qualifiers='16384'>7036</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.1911016Z'/><EventRecordID>50691</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='452'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Data>Driver load start</Data><Binary>0000000002002C00000000007C1B0040000000000000000000000000000000000000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message> 服务处于 Driver load start 状态。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.1563142Z'/><EventRecordID>50690</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>0</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>7</Data><Data Name='DeviceName'>sysdiag</Data><Data Name='DeviceTime'>2026-07-30T10:59:09.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“sysdiag”(0.0，‎2026‎-‎07‎-‎30T10:59:09.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.1263036Z'/><EventRecordID>50689</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>4</Data><Data Name='DeviceName'>UCPD</Data><Data Name='DeviceTime'>2104-11-25T07:34:34.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“UCPD”(10.0，‎2104‎-‎11‎-‎25T07:34:34.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:41.1218247Z'/><EventRecordID>50688</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>9</Data><Data Name='DeviceName'>FileCrypt</Data><Data Name='DeviceTime'>2075-09-01T06:07:07.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“FileCrypt”(10.0，‎2075‎-‎09‎-‎01T06:07:07.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Ntfs' Guid='{3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482}'/><EventID>98</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000002</Keywords><TimeCreated SystemTime='2026-08-19T20:21:40.7809144Z'/><EventRecordID>50687</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='444'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>C:</Data><Data Name='DeviceName'>\Device\HarddiskVolume3</Data><Data Name='CorruptionActionState'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>卷 C: (\Device\HarddiskVolume3) 运行状况良好。无需执行任何操作。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:40.1000119Z'/><EventRecordID>50686</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>3</Data><Data Name='DeviceName'>Wof</Data><Data Name='DeviceTime'>2047-07-10T21:40:35.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“Wof”(10.0，‎2047‎-‎07‎-‎10T21:40:35.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-FilterManager' Guid='{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}'/><EventID>6</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:40.0995458Z'/><EventRecordID>50685</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='FinalStatus'>0x0</Data><Data Name='DeviceVersionMajor'>10</Data><Data Name='DeviceVersionMinor'>0</Data><Data Name='DeviceNameLength'>8</Data><Data Name='DeviceName'>FileInfo</Data><Data Name='DeviceTime'>2093-04-02T09:29:43.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>文件系统筛选器“FileInfo”(10.0，‎2093‎-‎04‎-‎02T09:29:43.000000000Z)已成功加载并注册到筛选器管理器。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-FilterManager</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-HAL' Guid='{63d1e632-95cc-4443-9312-af927761d52a}'/><EventID>16</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0293702Z'/><EventRecordID>50684</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已初始化 IOMMU 错误报告。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-HAL</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>20</EventID><Version>0</Version><Level>4</Level><Task>6</Task><Opcode>0</Opcode><Keywords>0x8000000000000010</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0105630Z'/><EventRecordID>50683</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='UpdateReason'>0</Data><Data Name='EnabledNew'>true</Data><Data Name='CountNew'>0</Data><Data Name='CountOld'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>闰秒配置已更新。&#13;&#10;原因: Leap second data initialized from registry during boot&#13;&#10;已启用闰秒: true&#13;&#10;新闰秒计数: 0&#13;&#10;旧闰秒计数: 0</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider><Keywords><Keyword>Time</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>30</EventID><Version>0</Version><Level>4</Level><Task>21</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0104563Z'/><EventRecordID>50682</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ResetEndStart'>0</Data><Data Name='LoadOSImageStart'>42606</Data><Data Name='StartOSImageStart'>42620</Data><Data Name='ExitBootServicesEntry'>43713</Data><Data Name='ExitBootServicesExit'>43713</Data></EventData><RenderingInfo Culture='zh-CN'><Message>固件报告了启动指标。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>3</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0104488Z'/><EventRecordID>50681</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Status'>0</Data><Data Name='Flags'>82976</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Kernel started with status STATUS_SUCCESS and flags 82976.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-Hypervisor' Guid='{52fc89f8-995e-434c-a91e-199986449890}'/><EventID>165</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0079941Z'/><EventRecordID>50680</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NotAffectedMdsNo'>false</Data><Data Name='NotAffectedAtom'>false</Data><Data Name='MdClearSupported'>false</Data><Data Name='BufferFlushNeeded'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>虚拟机监控程序已配置 CVE-2019-11091 的缓解措施， 虚拟机的 CVE-2018-12126、CVE-2018-12127、CVE-2018-12130。&#13;&#10;&#13;&#10;处理器不受影响： false&#13;&#10;处理器系列不受影响： false&#13;&#10;处理器支持微层次结构缓冲区刷新： false&#13;&#10;需要缓冲区刷新： false&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-Hypervisor</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-Hypervisor' Guid='{52fc89f8-995e-434c-a91e-199986449890}'/><EventID>156</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0079939Z'/><EventRecordID>50679</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='NotAffectedRdclNo'>false</Data><Data Name='NotAffectedAtom'>false</Data><Data Name='CacheFlushSupported'>false</Data><Data Name='SmtEnabled'>true</Data><Data Name='ParentHypervisorFlushes'>false</Data><Data Name='DisabledLoadOption'>false</Data><Data Name='Enabled'>true</Data><Data Name='CacheFlushNeeded'>false</Data></EventData><RenderingInfo Culture='zh-CN'><Message>虚拟机监控程序为虚拟机配置了 CVE-2018-3646 缓解措施。&#13;&#10;&#13;&#10;处理器不受影响： false&#13;&#10;处理器系列不受影响： false&#13;&#10;处理器支持缓存刷新：  false&#13;&#10;HyperThreading 已启用： true&#13;&#10;父虚拟机监控程序应用缓解措施： false&#13;&#10;已启用 bcdedit： false&#13;&#10;缓解措施禁用的缓解措施： true&#13;&#10;需要刷新缓存： false&#13;&#10;</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-Hypervisor</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-Hypervisor' Guid='{52fc89f8-995e-434c-a91e-199986449890}'/><EventID>129</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0079923Z'/><EventRecordID>50678</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HardwarePresent'>true</Data><Data Name='HardwareEnabled'>true</Data><Data Name='Policy'>0x0</Data><Data Name='EnabledFeatures'>0x34a</Data><Data Name='InternalInfo'>0x0</Data><Data Name='Problems'>0x0</Data><Data Name='AdditionalInfo'>0x0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>虚拟机监控程序已初始化 I/O 重新映射。&#13;&#10;&#13;&#10;存在硬件： true&#13;&#10;已启用的硬件： true&#13;&#10;策略： 0x0&#13;&#10;已启用的功能： 0x34A&#13;&#10;内部信息： 0x0&#13;&#10;问题： 0x0&#13;&#10;其他信息： 0x0</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-Hypervisor</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-Hypervisor' Guid='{52fc89f8-995e-434c-a91e-199986449890}'/><EventID>2</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0079898Z'/><EventRecordID>50677</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='SchedulerType'>0x4</Data></EventData><RenderingInfo Culture='zh-CN'><Message>虚拟机监控程序计划程序类型为 0x4。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-Hypervisor</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Hyper-V-Hypervisor' Guid='{52fc89f8-995e-434c-a91e-199986449890}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0079892Z'/><EventRecordID>50676</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>虚拟机监控程序已成功启动。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Hyper-V-Hypervisor</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>27</EventID><Version>1</Version><Level>4</Level><Task>33</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036949Z'/><EventRecordID>50675</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='BootType'>0</Data><Data Name='LoadOptions'> NOEXECUTE=OPTIN  HYPERVISORLAUNCHTYPE=AUTO  FVEBOOT=2666496  NOVGA</Data></EventData><RenderingInfo Culture='zh-CN'><Message>引导类型为 0x0。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>25</EventID><Version>0</Version><Level>4</Level><Task>32</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036947Z'/><EventRecordID>50674</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='BootMenuPolicy'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>引导菜单策略为 0x1。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>238</EventID><Version>1</Version><Level>4</Level><Task>101</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036794Z'/><EventRecordID>50673</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='EfiTimeZoneBias'>2047</Data><Data Name='EfiDaylightFlags'>0</Data><Data Name='EfiTime'>2026-08-20T04:21:37.0000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>EFI 时区偏移： 2047。夏令时标志： 0。固件时间： ‎2026‎-‎08‎-‎20T04:21:37.000000000Z。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>20</EventID><Version>1</Version><Level>4</Level><Task>31</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036488Z'/><EventRecordID>50672</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='LastShutdownGood'>true</Data><Data Name='LastBootGood'>true</Data><Data Name='LastBootId'>229</Data><Data Name='BootStatusPolicy'>2</Data></EventData><RenderingInfo Culture='zh-CN'><Message>上一次关机的成功状态为“true”。上一次引导的成功状态为“true”。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>32</EventID><Version>0</Version><Level>4</Level><Task>58</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036339Z'/><EventRecordID>50671</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='BitlockerUserInputTime'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>bootmgr 花费了 0 毫秒等待用户输入。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>18</EventID><Version>0</Version><Level>4</Level><Task>57</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036219Z'/><EventRecordID>50670</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='EntryCount'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>此系统有 0x1 个引导选项。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Boot' Guid='{15ca44ff-4d7a-4baa-bba5-0998955e531e}'/><EventID>153</EventID><Version>0</Version><Level>4</Level><Task>62</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0036145Z'/><EventRecordID>50669</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Status'>0</Data><Data Name='EnableDisableReason'>100</Data><Data Name='VsmPolicy'>515</Data></EventData><RenderingInfo Culture='zh-CN'><Message>基于虚拟化的安全性(策略: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced)是 enabled due to VBS registry configuration。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-Boot</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>25</EventID><Version>0</Version><Level>4</Level><Task>12</Task><Opcode>0</Opcode><Keywords>0x8000000000000010</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0035426Z'/><EventRecordID>50668</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='SystemTime'>2026-08-19T20:21:38.5000000Z</Data><Data Name='LoaderTime'>2026-08-19T20:21:37.0000000Z</Data><Data Name='InternalBootFlags'>2</Data><Data Name='HalRtcErrorCode'>0</Data><Data Name='RealTimeIsUniversal'>false</Data><Data Name='IsSoftBoot'>false</Data><Data Name='Success'>true</Data><Data Name='Phase'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统时间已初始化为 ‎2026‎-‎08‎-‎19T20:21:38.500000000Z. &#13;&#10;&#13;&#10;加载器时间： ‎2026‎-‎08‎-‎19T20:21:37.000000000Z&#13;&#10;内部启动标志： 0x2&#13;&#10;HAL RTC 错误代码： 0x0&#13;&#10;RTC 时间为 UTC： false&#13;&#10;软启动： false&#13;&#10;成功： true&#13;&#10;阶段： 0</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider><Keywords><Keyword>Time</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>12</EventID><Version>0</Version><Level>4</Level><Task>1</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:21:39.0035416Z'/><EventRecordID>50667</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='8'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='MajorVersion'>10</Data><Data Name='MinorVersion'>0</Data><Data Name='BuildVersion'>26100</Data><Data Name='QfeVersion'>9168</Data><Data Name='ServiceVersion'>0</Data><Data Name='BootMode'>0</Data><Data Name='StartTime'>2026-08-19T20:21:38.5000000Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作系统已在系统时间 ‎2026‎-‎08‎-‎19T20:21:38.500000000Z 启动。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>13</EventID><Version>0</Version><Level>4</Level><Task>2</Task><Opcode>0</Opcode><Keywords>0x8000000000000080</Keywords><TimeCreated SystemTime='2026-08-19T20:20:53.8856294Z'/><EventRecordID>50666</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='4840'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='StopTime'>2026-08-19T20:20:53.8856287Z</Data></EventData><RenderingInfo Culture='zh-CN'><Message>操作系统将在系统时间 ‎2026‎-‎08‎-‎19T20:20:53.885628700Z 关闭。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>577</EventID><Version>0</Version><Level>4</Level><Task>280</Task><Opcode>0</Opcode><Keywords>0x8000000000000004</Keywords><TimeCreated SystemTime='2026-08-19T20:20:53.6657817Z'/><EventRecordID>50665</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='4840'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data Name='AdaptiveTargetState'>0</Data><Data Name='IsUnattended'>false</Data><Data Name='Status'>279</Data></EventData><RenderingInfo Culture='zh-CN'><Message>系统已准备好从 Active 启动的系统。 </Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-Power' Guid='{331c3b3a-2005-44c2-ac5e-77220c37d6b4}'/><EventID>109</EventID><Version>0</Version><Level>4</Level><Task>103</Task><Opcode>0</Opcode><Keywords>0x8000400000000404</Keywords><TimeCreated SystemTime='2026-08-19T20:20:53.1334632Z'/><EventRecordID>50664</EventRecordID><Correlation/><Execution ProcessID='1096' ThreadID='1100'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='ShutdownActionType'>5</Data><Data Name='ShutdownEventCode'>0</Data><Data Name='ShutdownReason'>5</Data></EventData><RenderingInfo Culture='zh-CN'><Message>内核电源管理器已启动关闭转换。&#13;&#10;&#13;&#10;Action： Power Action Reboot &#13;&#10;事件代码： 0x0 &#13;&#10;原因： Kernel API</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Kernel-Power</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-WLAN-AutoConfig' Guid='{9580d7dd-0379-4658-9870-d5be7d52d6de}'/><EventID>4001</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>2</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.6201374Z'/><EventRecordID>50663</EventRecordID><Correlation/><Execution ProcessID='2640' ThreadID='2660'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已成功停止 WLAN 自动配置服务。&#13;&#10;</Message><Level>信息</Level><Opcode>停止</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-WLAN-AutoConfig</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50037</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>69</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.5976135Z'/><EventRecordID>50662</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2368'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='DwordVal'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 客户端服务已停止。关机标记值为 1</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceStop</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='EventLog'/><EventID Qualifiers='32768'>6013</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.9572801Z'/><EventRecordID>50661</EventRecordID><Correlation/><Execution ProcessID='3944' ThreadID='3996'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data></Data><Data></Data><Data></Data><Data></Data><Data>14</Data><Data>60</Data><Data>-480 中国标准时间</Data><Binary>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</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>系统启动时间为 14 秒。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='EventLog'/><EventID Qualifiers='32768'>6005</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.9569345Z'/><EventRecordID>50660</EventRecordID><Correlation/><Execution ProcessID='3944' ThreadID='3996'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Binary>EA07080003001300140015003400BB030000000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>事件日志服务已启动。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='EventLog'/><EventID Qualifiers='32768'>6009</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:21:52.9568700Z'/><EventRecordID>50659</EventRecordID><Correlation/><Execution ProcessID='3944' ThreadID='3996'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Data>10.00.</Data><Data>26200</Data><Data></Data><Data>Multiprocessor Free</Data><Data>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Microsoft (R) Windows (R) 10.00. 26200  Multiprocessor Free。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DHCPv6-Client' Guid='{6a1f2b00-6a90-4c38-95a5-5cab3b056778}'/><EventID>51057</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>104</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.5971160Z'/><EventRecordID>50658</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2424'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='DwordVal'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv6 客户端服务停止操作即将完成。DHCP 上下文引用计数为 1</Message><Level>信息</Level><Task>Service State Event</Task><Opcode>ServiceStopWithRefCount</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-DHCPv6-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50106</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>129</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4895004Z'/><EventRecordID>50657</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2368'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 正在等待 DHCPv6 服务停止</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceShutdown</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DHCPv6-Client' Guid='{6a1f2b00-6a90-4c38-95a5-5cab3b056778}'/><EventID>51047</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>63</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4877854Z'/><EventRecordID>50656</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2424'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='DwordVal'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv6 客户端服务已停止。关闭标记值为 1</Message><Level>信息</Level><Task>Service State Event</Task><Opcode>ServiceStop</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-DHCPv6-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50105</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>129</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4850748Z'/><EventRecordID>50655</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2368'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 客户端 ProcessDHCPRequestForever 收到 TERMINATE_EVENT</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceShutdown</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Dhcp-Client' Guid='{15a7a4f8-0072-4eab-abad-f98a4d666aed}'/><EventID>50104</EventID><Version>0</Version><Level>4</Level><Task>4</Task><Opcode>129</Opcode><Keywords>0x2000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4838360Z'/><EventRecordID>50654</EventRecordID><Correlation/><Execution ProcessID='2300' ThreadID='2304'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>DHCPv4 客户端收到关闭通知</Message><Level>信息</Level><Task>服务状态事件</Task><Opcode>ServiceShutdown</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Dhcp-Client</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>2</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4197994Z'/><EventRecordID>50653</EventRecordID><Correlation/><Execution ProcessID='3476' ThreadID='3488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TrustletIdentity'>6</Data><Data Name='NormalProcessId'>3476</Data><Data Name='Status'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet Id 6 and Pid 3476 stopped with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Winlogon' Guid='{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}'/><EventID>7002</EventID><Version>0</Version><Level>4</Level><Task>1102</Task><Opcode>0</Opcode><Keywords>0x2000200000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.3258181Z'/><EventRecordID>50652</EventRecordID><Correlation/><Execution ProcessID='1164' ThreadID='1640'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TSId'>1</Data><Data Name='UserSid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data></EventData><RenderingInfo Culture='zh-CN'><Message>客户体验改善计划的用户注销通知</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Winlogon</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='EventLog'/><EventID Qualifiers='32768'>6006</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:52.4884455Z'/><EventRecordID>50651</EventRecordID><Correlation/><Execution ProcessID='1236' ThreadID='2132'/><Channel>System</Channel><Computer>Asuka</Computer><Security/></System><EventData><Binary>0100000000000000</Binary></EventData><RenderingInfo Culture='zh-CN'><Message>事件日志服务已停止。</Message><Level>信息</Level><Task>无</Task><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:51.9886590Z'/><EventRecordID>50650</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000c-288c-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>2</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:51.5098705Z'/><EventRecordID>50649</EventRecordID><Correlation/><Execution ProcessID='7476' ThreadID='6800'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet Id 0 and Pid 0 stopped with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='User32' Guid='{b0aa8734-56f7-41cc-b2f4-de228e98b946}' EventSourceName='User32'/><EventID Qualifiers='32768'>1074</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:51.2181691Z'/><EventRecordID>50648</EventRecordID><Correlation/><Execution ProcessID='1028' ThreadID='1044'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (ASUKA)</Data><Data Name='param2'>ASUKA</Data><Data Name='param3'>其他(计划外)</Data><Data Name='param4'>0x0</Data><Data Name='param5'>重启</Data><Data Name='param6'></Data><Data Name='param7'>Asuka\UaHeYu</Data></EventData><RenderingInfo Culture='zh-CN'><Message>进程 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (ASUKA) 由于以下原因已代表用户 Asuka\UaHeYu 启动计算机 ASUKA 的 重启: 其他(计划外)&#13;&#10; 原因代码: 0x0&#13;&#10; 关机类型: 重启&#13;&#10; 注释: </Message><Level>信息</Level><Provider>User32</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:47.3806786Z'/><EventRecordID>50647</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:47.3705829Z'/><EventRecordID>50646</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:47.3675619Z'/><EventRecordID>50645</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:47.3514229Z'/><EventRecordID>50644</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:47.2450977Z'/><EventRecordID>50643</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:10.9770841Z'/><EventRecordID>50642</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0004-f68a-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:09.7012299Z'/><EventRecordID>50641</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:09.6934752Z'/><EventRecordID>50640</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:09.6656836Z'/><EventRecordID>50639</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:09.6499179Z'/><EventRecordID>50638</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:09.5770968Z'/><EventRecordID>50637</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2938403Z'/><EventRecordID>50636</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2938403Z'/><EventRecordID>50635</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2800682Z'/><EventRecordID>50634</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2642940Z'/><EventRecordID>50633</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2622900Z'/><EventRecordID>50632</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2505216Z'/><EventRecordID>50631</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0009-4084-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2425028Z'/><EventRecordID>50630</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2425028Z'/><EventRecordID>50629</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2407580Z'/><EventRecordID>50628</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2407580Z'/><EventRecordID>50627</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2407580Z'/><EventRecordID>50626</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2387539Z'/><EventRecordID>50625</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000a-5689-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.2101979Z'/><EventRecordID>50624</EventRecordID><Correlation/><Execution ProcessID='7476' ThreadID='3364'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.1974768Z'/><EventRecordID>50623</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000b-4585-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>2</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:05.0365619Z'/><EventRecordID>50622</EventRecordID><Correlation/><Execution ProcessID='4572' ThreadID='7732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet Id 0 and Pid 0 stopped with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:04.1248369Z'/><EventRecordID>50621</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:03.7644665Z'/><EventRecordID>50620</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:03.7644665Z'/><EventRecordID>50619</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:02.6082288Z'/><EventRecordID>50618</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000f-4885-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.8185161Z'/><EventRecordID>50617</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.8164576Z'/><EventRecordID>50616</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.8010765Z'/><EventRecordID>50615</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000b-3b85-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7826863Z'/><EventRecordID>50614</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7826863Z'/><EventRecordID>50613</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7806831Z'/><EventRecordID>50612</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7806831Z'/><EventRecordID>50611</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7806831Z'/><EventRecordID>50610</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.7706605Z'/><EventRecordID>50609</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000c-f789-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.6460215Z'/><EventRecordID>50608</EventRecordID><Correlation/><Execution ProcessID='4572' ThreadID='7732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:20:01.6152769Z'/><EventRecordID>50607</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000c-a989-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>MicrosoftEdgeElevationService</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FCBE96C-1697-43AF-9140-2897C7C69767}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 MicrosoftEdgeElevationService 以运行服务器:&#13;&#10;{1FCBE96C-1697-43AF-9140-2897C7C69767} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:57.1655854Z'/><EventRecordID>50606</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000d-fd86-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:54.5882432Z'/><EventRecordID>50605</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='3284'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD Controller Emulation</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>AMDXE</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD Controller Emulation 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:53.5541436Z'/><EventRecordID>50604</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='3284'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMDSAFD</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>AMDSAFD</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMDSAFD 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:52.1244124Z'/><EventRecordID>50603</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0000-948a-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:51.1947299Z'/><EventRecordID>50602</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='3284'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD Crash Defender Service</Data><Data Name='param2'>自动启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>AMD Crash Defender Service</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD Crash Defender Service 服务的启动类型从 自动启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:51.1927272Z'/><EventRecordID>50601</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='3284'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD Crash Defender Driver</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>amdfendr</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD Crash Defender Driver 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:51.1927272Z'/><EventRecordID>50600</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='3284'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD Crash Defender Manager Driver</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>amdfendrmgr</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD Crash Defender Manager Driver 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:45.7483547Z'/><EventRecordID>50599</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='1352'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD External Events Utility</Data><Data Name='param2'>自动启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>AMD External Events Utility</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD External Events Utility 服务的启动类型从 自动启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:45.7443470Z'/><EventRecordID>50598</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='1352'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>amduw23g-202082-805df935</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>amduw23g-202082-805df935</Data></EventData><RenderingInfo Culture='zh-CN'><Message>amduw23g-202082-805df935 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:45.2785417Z'/><EventRecordID>50597</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-b898-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Service Control Manager' Guid='{555908d1-a6d7-4695-8e1e-26931d2012f4}' EventSourceName='Service Control Manager'/><EventID Qualifiers='16384'>7040</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:43.5748880Z'/><EventRecordID>50596</EventRecordID><Correlation/><Execution ProcessID='1244' ThreadID='1352'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>AMD Function Driver for HD Audio Service</Data><Data Name='param2'>按需启动</Data><Data Name='param3'>已禁用</Data><Data Name='param4'>AtiHDAudioService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>AMD Function Driver for HD Audio Service 服务的启动类型从 按需启动 更改为 已禁用。</Message><Level>信息</Level><Provider>Microsoft-Windows-Service Control Manager</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:32.4102194Z'/><EventRecordID>50595</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000a-b086-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.8267925Z'/><EventRecordID>50594</EventRecordID><Correlation/><Execution ProcessID='6776' ThreadID='6984'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD Software: Host Application"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.7837527Z'/><EventRecordID>50593</EventRecordID><Correlation/><Execution ProcessID='1716' ThreadID='3320'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD Link"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.7406000Z'/><EventRecordID>50592</EventRecordID><Correlation/><Execution ProcessID='7784' ThreadID='7816'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD Radeon Software Service"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.6980230Z'/><EventRecordID>50591</EventRecordID><Correlation/><Execution ProcessID='6700' ThreadID='7620'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="Radeon Software: Host Service"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.6551620Z'/><EventRecordID>50590</EventRecordID><Correlation/><Execution ProcessID='7732' ThreadID='7872'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD Radeon Software"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.6121863Z'/><EventRecordID>50589</EventRecordID><Correlation/><Execution ProcessID='7628' ThreadID='7024'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD ReLive"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.5685124Z'/><EventRecordID>50588</EventRecordID><Correlation/><Execution ProcessID='7632' ThreadID='7636'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="AMD ReLive: Host Application"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Configuration-Change-Monitor' Guid='{a148cf02-be6d-5f08-94e3-b68de60d8422}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:30.5006669Z'/><EventRecordID>50587</EventRecordID><Correlation/><Execution ProcessID='7464' ThreadID='7028'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='Sid'>S-1-5-18</Data><Data Name='Command line'>C:\Windows\system32\netsh.exe  advfirewall firewall delete rule name="Radeon Software: Host Application"</Data><Data Name='Parent Process 1'>C:\Windows\System32\netsh.exe</Data><Data Name='Parent Process 2'>C:\Windows\System32\cmd.exe</Data><Data Name='Parent Process 3'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 4'>C:\Windows\System32\msiexec.exe</Data><Data Name='Parent Process 5'>C:\Windows\System32\services.exe</Data><Data Name='Parent Process 6'>C:\Windows\System32\wininit.exe</Data><Data Name='Parent Process 7'></Data><Data Name='Parent Process 8'></Data><Data Name='Parent Process 9'></Data><Data Name='Parent Process 10'></Data></EventData><RenderingInfo Culture='zh-CN'><Level>信息</Level><Opcode>信息</Opcode></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:26.9046188Z'/><EventRecordID>50586</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0000-e089-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:21.8118255Z'/><EventRecordID>50585</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-cf96-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7995598Z'/><EventRecordID>50584</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7995598Z'/><EventRecordID>50583</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7995598Z'/><EventRecordID>50582</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7975563Z'/><EventRecordID>50581</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7975563Z'/><EventRecordID>50580</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7975563Z'/><EventRecordID>50579</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7958127Z'/><EventRecordID>50578</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.7958127Z'/><EventRecordID>50577</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.5253557Z'/><EventRecordID>50576</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.4591002Z'/><EventRecordID>50575</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.4591002Z'/><EventRecordID>50574</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.3453739Z'/><EventRecordID>50573</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.3061036Z'/><EventRecordID>50572</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.3041007Z'/><EventRecordID>50571</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.3041007Z'/><EventRecordID>50570</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.1428348Z'/><EventRecordID>50569</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:20.1270526Z'/><EventRecordID>50568</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:16.1161728Z'/><EventRecordID>50567</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0004-0b85-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1732'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:15.1685550Z'/><EventRecordID>50566</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000e-e184-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>EventSystem</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1BE1F766-5536-11D1-B726-00C04FB926AF}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 EventSystem 以运行服务器:&#13;&#10;{1BE1F766-5536-11D1-B726-00C04FB926AF} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:12.6445826Z'/><EventRecordID>50565</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:12.5869013Z'/><EventRecordID>50564</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:12.5768856Z'/><EventRecordID>50563</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:12.5748826Z'/><EventRecordID>50562</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.6750192Z'/><EventRecordID>50561</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.6728713Z'/><EventRecordID>50560</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.6245900Z'/><EventRecordID>50559</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.5971015Z'/><EventRecordID>50558</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Kernel-General' Guid='{a68ca8b7-004f-d7b6-a698-07e2de0f1f5d}'/><EventID>16</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.5665610Z'/><EventRecordID>50557</EventRecordID><Correlation/><Execution ProcessID='4128' ThreadID='4172'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='HiveNameLength'>159</Data><Data Name='HiveName'>\??\C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-2092180878-166494762-4224106802-1002\SystemAppData\Helium\Cache\6c5b5ec5d6cbfded_COM15.dat</Data><Data Name='KeysUpdated'>1</Data><Data Name='DirtyPages'>1</Data></EventData><RenderingInfo Culture='zh-CN'><Message>已经清除配置单元 \??\C:\ProgramData\Packages\Microsoft.GetHelp_8wekyb3d8bbwe\S-1-5-21-2092180878-166494762-4224106802-1002\SystemAppData\Helium\Cache\6c5b5ec5d6cbfded_COM15.dat 中的访问历史记录，更新 1 个项并创建 1 个已修改的页面。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>Microsoft-Windows-Kernel-General</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4728411Z'/><EventRecordID>50556</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4609047Z'/><EventRecordID>50555</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4241171Z'/><EventRecordID>50554</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4221115Z'/><EventRecordID>50553</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4221115Z'/><EventRecordID>50552</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4203655Z'/><EventRecordID>50551</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4183614Z'/><EventRecordID>50550</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.4183614Z'/><EventRecordID>50549</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.WamProviderRegistration</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.WamProviderRegistration 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.3925633Z'/><EventRecordID>50548</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.2312390Z'/><EventRecordID>50547</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000f-2e7f-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>WpnUserService_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{F53321FA-34F8-4B7F-B9A3-361877CB94CF}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 WpnUserService_60376 以运行服务器:&#13;&#10;{F53321FA-34F8-4B7F-B9A3-361877CB94CF} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.2252260Z'/><EventRecordID>50546</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000d-4684-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>RmSvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{581333F6-28DB-41BE-BC7A-FF201F12F3F6}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 RmSvc 以运行服务器:&#13;&#10;{581333F6-28DB-41BE-BC7A-FF201F12F3F6} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.1954157Z'/><EventRecordID>50545</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.Management.CapabilityUsage</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.Management.CapabilityUsage 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0503335Z'/><EventRecordID>50544</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0503335Z'/><EventRecordID>50543</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000f-287f-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>EventSystem</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1BE1F766-5536-11D1-B726-00C04FB926AF}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 EventSystem 以运行服务器:&#13;&#10;{1BE1F766-5536-11D1-B726-00C04FB926AF} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0503335Z'/><EventRecordID>50542</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0123263Z'/><EventRecordID>50541</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000d-2b84-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>WpnUserService_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 WpnUserService_60376 以运行服务器:&#13;&#10;{D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0042462Z'/><EventRecordID>50540</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:10.0042462Z'/><EventRecordID>50539</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0004-1782-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1488'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>WpnUserService_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FFE4FFD-25B1-40B1-A1EA-EF633353BB4E}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 WpnUserService_60376 以运行服务器:&#13;&#10;{1FFE4FFD-25B1-40B1-A1EA-EF633353BB4E} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9991969Z'/><EventRecordID>50538</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9931284Z'/><EventRecordID>50537</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9628334Z'/><EventRecordID>50536</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9234308Z'/><EventRecordID>50535</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9183967Z'/><EventRecordID>50534</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-7f80-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9173930Z'/><EventRecordID>50533</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-7f80-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9143807Z'/><EventRecordID>50532</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-7f80-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.9133767Z'/><EventRecordID>50531</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-7f80-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.8740307Z'/><EventRecordID>50530</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.8720033Z'/><EventRecordID>50529</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0002-7f80-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.8537790Z'/><EventRecordID>50528</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.7913523Z'/><EventRecordID>50527</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdk.UI.Shell.ViewCoordinator</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdk.UI.Shell.ViewCoordinator 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.7439113Z'/><EventRecordID>50526</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.7428996Z'/><EventRecordID>50525</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1736'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>UdkUserSvc_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>WindowsUdkInternal.System.ActivationService</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 UdkUserSvc_60376 以运行服务器:&#13;&#10;WindowsUdkInternal.System.ActivationService 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.7418884Z'/><EventRecordID>50524</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.5601574Z'/><EventRecordID>50523</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0000-5d86-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>WpnUserService_60376</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{1FFE4FFD-25B1-40B1-A1EA-EF633353BB4E}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 WpnUserService_60376 以运行服务器:&#13;&#10;{1FFE4FFD-25B1-40B1-A1EA-EF633353BB4E} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.4288632Z'/><EventRecordID>50522</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0006-798b-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.4031218Z'/><EventRecordID>50521</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.3538070Z'/><EventRecordID>50520</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1948'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:09.1313639Z'/><EventRecordID>50519</EventRecordID><Correlation ActivityID='{f55d7e44-3017-000c-db7f-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1416'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-21-2092180878-166494762-4224106802-1002'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>ShellHWDetection</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{DD522ACC-F821-461A-A407-50B198B896DC}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器:&#13;&#10;{DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:08.9455009Z'/><EventRecordID>50518</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-20'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>TokenBroker</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.Security.Authentication.Web.TokenBrokerInternal</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器:&#13;&#10;Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:08.7438850Z'/><EventRecordID>50517</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0004-167f-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1480'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-90-0-1'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>DispBrokerDesktopSvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>DispBrokerDesktop.GlobalBrokerInstance</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 DispBrokerDesktopSvc 以运行服务器:&#13;&#10;DispBrokerDesktop.GlobalBrokerInstance 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Winlogon' Guid='{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}'/><EventID>7001</EventID><Version>0</Version><Level>4</Level><Task>1101</Task><Opcode>0</Opcode><Keywords>0x2000200000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:08.6588079Z'/><EventRecordID>50516</EventRecordID><Correlation/><Execution ProcessID='1164' ThreadID='1640'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='TSId'>1</Data><Data Name='UserSid'>S-1-5-21-2092180878-166494762-4224106802-1002</Data></EventData><RenderingInfo Culture='zh-CN'><Message>客户体验改善计划的用户登录通知</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-Winlogon</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:06.5365993Z'/><EventRecordID>50515</EventRecordID><Correlation ActivityID='{f55d7e44-3017-0005-d97e-5df51730dd01}'/><Execution ProcessID='1404' ThreadID='1624'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>RmSvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>{581333F6-28DB-41BE-BC7A-FF201F12F3F6}</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 RmSvc 以运行服务器:&#13;&#10;{581333F6-28DB-41BE-BC7A-FF201F12F3F6} 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='TPM' Guid='{1b6b0772-251b-4d42-917d-faca166bc059}'/><EventID>18</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.6471275Z'/><EventRecordID>50514</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='504'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='driverFile'>0x14</Data><Data Name='lineNumber'>217</Data><Data Name='Data'>0</Data></EventData><RenderingInfo Culture='zh-CN'><Message>此事件会触发受信任的平台模块(TPM)预配/状态检查运行。</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>系统</Channel><Provider>TPM</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>1</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.5727481Z'/><EventRecordID>50513</EventRecordID><Correlation/><Execution ProcessID='3444' ThreadID='3468'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TrustletIdentity'>6</Data><Data Name='NormalProcessId'>3476</Data><Data Name='Status'>0</Data><Data Name='ImageName'>\??\C:\Windows\System32\NgcIso.exe</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet \??\C:\Windows\System32\NgcIso.exe Id 6 and Pid 3476 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-IsolatedUserMode' Guid='{73a33ab2-1966-4999-8add-868c41415269}'/><EventID>5</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000400000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.5721996Z'/><EventRecordID>50512</EventRecordID><Correlation/><Execution ProcessID='3444' ThreadID='3468'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-19'/></System><EventData><Data Name='TrustletIdentity'>0</Data><Data Name='NormalProcessId'>0</Data><Data Name='Status'>0</Data><Data Name='ImageName'>NULL</Data></EventData><RenderingInfo Culture='zh-CN'><Message>Secure Trustlet NULL Id 0 and Pid 0 started with status STATUS_SUCCESS.</Message><Level>信息</Level><Opcode>信息</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-IsolatedUserMode</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-WLAN-AutoConfig' Guid='{9580d7dd-0379-4658-9870-d5be7d52d6de}'/><EventID>4000</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>1</Opcode><Keywords>0x4000000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.0943231Z'/><EventRecordID>50511</EventRecordID><Correlation/><Execution ProcessID='2640' ThreadID='2664'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData></EventData><RenderingInfo Culture='zh-CN'><Message>已成功启动 WLAN 自动配置服务。&#13;&#10;</Message><Level>信息</Level><Opcode>开始</Opcode><Channel>System</Channel><Provider>Microsoft-Windows-WLAN-AutoConfig</Provider></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.0734456Z'/><EventRecordID>50510</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1480'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.Management.CapabilityUsage</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.Management.CapabilityUsage 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event><Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-DistributedCOM' Guid='{1B562E86-B7AA-4131-BADC-B6F3A001407E}' EventSourceName='DCOM'/><EventID Qualifiers='0'>10005</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime='2026-08-19T20:19:05.0714405Z'/><EventRecordID>50509</EventRecordID><Correlation/><Execution ProcessID='1404' ThreadID='1480'/><Channel>System</Channel><Computer>Asuka</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='param1'>1084</Data><Data Name='param2'>camsvc</Data><Data Name='param3'>不可用</Data><Data Name='param4'>Windows.Internal.CapabilityAccess.CapabilityAccess</Data></EventData><RenderingInfo Culture='zh-CN'><Message>DCOM 在尝试使用参数“不可用”启动服务 camsvc 以运行服务器:&#13;&#10;Windows.Internal.CapabilityAccess.CapabilityAccess 时遇到错误“1084”</Message><Level>错误</Level><Opcode>信息</Opcode><Provider>Microsoft-Windows-DistributedCOM</Provider><Keywords><Keyword>经典</Keyword></Keywords></RenderingInfo></Event></Events>